> For the complete documentation index, see [llms.txt](https://windows.dfirhandbook.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://windows.dfirhandbook.com/windows-dfir-and-mittr/discovery.md).

# Discovery

* T1087: Account Discovery
* T1016: System Network Configuration Discovery
* T1046: Network Service Scanning
* T1615: Group Policy Discovery
* T1082: System Information Discovery
* T1614: System Location Discovery
* T1057: Process Discovery
* T1518: Software Discovery
* T1135: Network Share Discovery
* T1049: System Network Connections Discovery
* T1007: System Service Discovery
* T1124: System Time Discovery
* T1069: Permission Groups Discovery