T0846 Remote System Discovery
ICSAdversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for subsequent Lateral Movement or Discovery techniques. Functionality could exist within adversary tools to enable this, but utilities available on the operating system or vendor software could also be used.
01
platforms
Platforms this applies to.
EmbeddedWindowsLinuxNetwork Devices
02
sub-techniques (3)
More specific entries beneath this one.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (3)
Data components that detect this.
05
countered by (D3FEND)
D3FEND countermeasures that counter this.
Detect
06
software (3)
Malware and tools associated with this.
07
targets assets (16)
ICS/OT assets this targets.
08
campaigns (2)
Campaigns that use this.
09
source
Where this definition is published.