T0846.001 Port Scan
sub-techniqueICSAdversaries may perform a port scan on a system, device, or network to identify live hosts, enumerate open ports and running services, identify operating systems, and map out the network. The results of a port scan may inform adversary Discovery, Lateral Movement, and vulnerability exploitation decisions (Exploitation for Evasion, Exploitation for Privilege Escalation, Exploitation of Remote Services). Some common tools for executing a port scan include `nmap`, `netcat`, and the Advanced Port Scanner.
platforms
Platforms this applies to.
sub-technique of
The broader entity this sits under.
mitigations
ATT&CK mitigations that reduce this.
detected by (3)
Data components that detect this.
software (4)
Malware and tools associated with this.
targets assets (17)
ICS/OT assets this targets.
campaigns (1)
Campaigns that use this.
source
Where this definition is published.