Sigma Rule Library

MITRE ATT&CK technique

Gather Victim Identity Information detection rulesT1589

Gather Victim Identity Information (T1589) is a MITRE ATT&CK technique in the Reconnaissance tactic. This page lists the 3 community-maintained Sigma detection rules in the library mapped to T1589 and its sub-techniques. Each rule includes its detection logic, log source, false positives and original YAML. These rules mainly target azure, windows, linux.

Top products

Tactic