Detection of Masquerading

Technique Detected:  Masquerading | T1655

ID: DET0715
Domains: Mobile
Analytics: AN1843, AN1844
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1843

Unexpected behavior from an application could be an indicator of masquerading.
Application vetting services may potentially determine if an application contains suspicious code and/or metadata.

Log Sources
Data Component Name Channel
System Notifications (DC0117) User Interface None
API Calls (DC0112) Application Vetting None

AN1844

Unexpected behavior from an application could be an indicator of masquerading.
Application vetting services may potentially determine if an application contains suspicious code and/or metadata.

Log Sources
Data Component Name Channel
System Notifications (DC0117) User Interface None
API Calls (DC0112) Application Vetting None