Protected User Data: Contact List T1636.003

Mobile Tactic: Collection

Authoring guide

These 1 rule share fields, values, and exclusions.

Fields filtered most (2 distinct)

These fields appear most often in rule filters.

FieldRulesHowSample values
action1eq 1UpdateSupportContactList
status1eq 1SUCCESS

Top indicator values (2 distinct)

These values appear most often in rule predicates.

FieldKindValueRules (here)Corpus reach
actioneq
UpdateSupportContactList
1
statuseq
SUCCESS
116

Rules under this technique

These vendors publish rules tagged with this technique.

Platform: SaaS

Domain: SaaS

Panther 1 rule