Home >
ICS >
Participants >
Claroty >
Remote System Discovery (T0846)
|
|
TRITON |
||||
Step | ATT&CK Pattern |
|
||
9.A.2
|
Tactic Discovery (TA0102) |
|
||
9.B.2
|
Tactic Discovery (TA0102) |
|
||
16.A.2
|
Tactic Discovery (TA0102) |
|
Criteria
Evidence that a network discovery scan for TCP port 44818 was initiated from the control EWS (10.0.100.20) on hosts across the whole subnet (10.0.100.1-10.0.100.255).
Criteria
Evidence of the network discovery broadcast request sent from the control EWS (10.0.100.15) over TCP port 44818.