T0882 Theft of Operational Information

ICS

Adversaries may steal operational information on a production environment as a direct mission outcome for personal gain or to inform future operations. This information may include design documents, schedules, rotational data, or similar artifacts that provide insight on operations. In the Bowman Dam incident, adversaries probed systems for operational data.

01

Plattformen

Plattformen, für die dies gilt.

None
02

Gegenmaßnahmen

ATT&CK-Gegenmaßnahmen, die dies verringern.

03

Software (4)

Zugehörige Malware und Tools.

04

Kampagnen (1)

Kampagnen, die dies verwenden.

05

Quelle

Wo diese Definition veröffentlicht ist.