T0801 Monitor Process State
ICSAdversaries may gather information about the physical process state. This information may be used to gain more information about the process itself or used as a trigger for malicious actions. The sources of process state information may vary such as, OPC tags, historian data, specific PLC block information, or network traffic.
01
platforms
Platforms this applies to.
EmbeddedWindowsLinuxNetwork Devices
02
mitigations
ATT&CK mitigations that reduce this.
03
detected by (4)
Data components that detect this.
04
countered by (D3FEND)
D3FEND countermeasures that counter this.
05
software (4)
Malware and tools associated with this.
06
targets assets (11)
ICS/OT assets this targets.
07
source
Where this definition is published.