T0870ICSDeprecated
Detect Program State
Adversaries may seek to gather information about the current state of a program on a PLC. State information reveals information about the program, including whether it's running, halted, stopped, or has generated an exception. This information may be leveraged as a verification of malicious program execution or to determine if a PLC is ready to download a new program.
Tactics
Collection
Platforms
WindowsField Controller/RTU/PLC/IED
Related CAPECs
—
Affected vulnerabilities (Inferred)
—
No matches — refine the filter to see a result.