MITRE ATT&CK technique

Peripheral Device Discovery detection rulesT1120

Peripheral Device Discovery (T1120) is a MITRE ATT&CK technique in the Discovery tactic. This page lists the 2 community-maintained Sigma detection rules in the library mapped to T1120 and its sub-techniques. Each rule includes its detection logic, log source, false positives and original YAML. These rules mainly target windows.