Home >
ICS >
Participants >
Microsoft >
Program Download (T0843)
|
|
TRITON |
||||
Step | ATT&CK Pattern |
|
||
20.B.3
|
Tactic Lateral Movement (TA0109) |
|
||
22.B.2
|
Tactic Lateral Movement (TA0109) |
|
||
24.B.3
|
Tactic Lateral Movement (TA0109) |
|
Criteria
Evidence of an adversary initiated online edit action on the safety PLC (10.0.100.105), requested from the safety EWS (10.0.100.15).
Criteria
Evidence of an adversary initiated program download action on the safety PLC (10.0.100.105) to overwrite the current configuration (requested from the safety EWS [10.0.100.15]).