T0871 Execution through API

ICS

Adversaries may attempt to leverage Application Program Interfaces (APIs) used for communication between control software and the hardware. Specific functionality is often coded into APIs which can be called by software to engage specific functions on a device or other software.

01

platforms

Platforms this applies to.

EmbeddedWindowsLinuxNetwork Devices
02

mitigations

ATT&CK mitigations that reduce this.

05

groups (1)

Threat groups associated with this.

06

software (1)

Malware and tools associated with this.

08

source

Where this definition is published.