T0845 Program Upload
ICSAdversaries may attempt to upload a program from a PLC to gather information about an industrial process. Uploading a program may allow them to acquire and study the underlying logic. Methods of program upload include vendor software, which enables the user to upload and read a program running on a PLC. This software can be used to upload the target program to a workstation, jump box, or an interfacing device.
01
platforms
Platforms this applies to.
Embedded
02
mitigations
ATT&CK mitigations that reduce this.
03
detected by (2)
Data components that detect this.
04
countered by (D3FEND)
D3FEND countermeasures that counter this.
Model
Harden
05
groups (1)
Threat groups associated with this.
06
software (2)
Malware and tools associated with this.
07
targets assets (4)
ICS/OT assets this targets.
08
source
Where this definition is published.