T1124Discovery
System Time Discovery
An adversary may gather the system time and/or time zone settings from a local or remote system. The system time is set and stored by services, such as the Windows Time Service on Windows or systemsetup on macOS. These time settings may also be synchronized between systems and services in an enterprise network, typically accomplished with a network time server within a domain. System time…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
Detections
3 Sigma rules tagged T1124System Time DiscoveryT11243 general rules
- Use of W32tm as Timerhightest
- Cisco Discoverylowtest
- Discovery of a System Timelowtest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to System Time Discovery
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.