T0829 Loss of View

ICS

Adversaries may cause a sustained or permanent loss of view where the ICS equipment will require local, hands-on operator intervention; for instance, a restart or manual operation. By causing a sustained reporting or visibility loss, the adversary can effectively hide the present state of operations. This loss of view can occur without affecting the physical processes themselves.

01

platforms

Platforms this applies to.

None
02

mitigations

ATT&CK mitigations that reduce this.

03

groups (1)

Threat groups associated with this.

04

software (4)

Malware and tools associated with this.

06

source

Where this definition is published.