T1217Discovery

Browser Information Discovery

Adversaries may enumerate information about browsers to learn more about compromised environments. Data saved by browsers (such as bookmarks, accounts, and browsing history) may reveal a variety of personal information about users (e.g., banking sites, relationships/interests, social media, etc.) as well as details about internal network resources such as servers, tools/dashboards, or other…

attack.mitre.org ↗

CVEs1

In 1

Reports0

Detections

4 Sigma rules tagged T1217

Browser Information DiscoveryT12174 general rules

Automated Collection Bookmarks Using Get-ChildItem PowerShelllowtest
File And SubFolder Enumeration Via Dir Commandlowtest
Suspicious Where Executionlowtest
Suspicious File Access to Browser Credential Storagelowexperimental

CVEs linked to Browser Information Discovery

1 CVE, by priority. Each link shows its badge.

CVE-2020-3580Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVRansomwarePublic exploitMedium · 6.1T1204.001Malicious Link T1059Command and Scripting Interpreter+1 more
MITRE CTID mapping of the KEV entry · follow-on activity
85.6%Top 0.28%
77.2priority