Home >
ICS >
Participants >
Armis >
Remote System Discovery (T0846)
|
|
TRITON |
||||
Step | ATT&CK Pattern |
|
||
9.A.2
|
Tactic Discovery (TA0102) |
|
||
9.B.2
|
Tactic Discovery (TA0102) |
|
||
16.A.2
|
Tactic Discovery (TA0102) |
|
Criteria
Evidence that a network discovery scan for TCP port 44818 was initiated from the control EWS (10.0.100.20) on hosts across the whole subnet (10.0.100.1-10.0.100.255).
Criteria
Evidence of the network discovery broadcast request sent from the control EWS (10.0.100.15) over TCP port 44818.
Criteria
Evidence of the network discovery broadcast request sent from the safety EWS (10.0.100.15) over TCP port 44818.