MITRE ATT&CK technique

Hardware Additions detection rulesT1200

Hardware Additions (T1200) is a MITRE ATT&CK technique in the Initial Access tactic. This page lists the 3 community-maintained Sigma detection rules in the library mapped to T1200 and its sub-techniques. Each rule includes its detection logic, log source, false positives and original YAML. These rules mainly target windows.