Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects two distinct suspicious activities on Android devices: the manual installation of an APK file using the 'pm' tool with specific flags, and the modification of security-sensitive settings to enable accessibility services via the 'settings' command. Both patterns are commonly associated with malicious Android applications or post-compromise activity.
avatar
Ibrahim Saud@tektrix
avatar
Detections.ai Community
2 months ago
009