System Notifications represent operating system alerts, warnings, or status messages generated in response to application actions, system state changes, or security events. These notifications may indicate potentially malicious activity or abnormal application behavior.
Examples
Collection Methods
| Name | Channel |
|---|---|
| android:ManagedAppLog | Documented DPC/admin callbacks or managed-app generated event telemetry |
| iOS:ManagedAppLog | ManagedApplicationFeedback or application-generated telemetry |
| iOS:unifiedlog | \"has pasted from\" cross-app paste notification text containing source app name |
| User Interface | None |
| ID | Name | Technique Detected |
|---|---|---|
| DET0643 | Detection of Clipboard Data | T1414 |
| DET0688 | Detection of Out of Band Data | T1644 |
| DET0683 | Detection of Transmitted Data Manipulation | T1641.001 |