T1695.002 Ethernet
sub-techniqueICSAdversaries may block access to Ethernet communications to prevent instructions or configurations messages from reaching target systems and devices. Ethernet connections allow for communications between IT and OT systems and devices. Blocking Ethernet communications may also block command and reporting messages. An adversary may block Ethernet communications by disabling network interfaces, Service Stop, or conducting an Adversary-in-the-Middle attack and dropping the network traffic.
01
platforms
Platforms this applies to.
EmbeddedWindowsLinuxNetwork Devices
02
sub-technique of
The broader entity this sits under.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (3)
Data components that detect this.
05
software (1)
Malware and tools associated with this.
06
targets assets (18)
ICS/OT assets this targets.
07
source
Where this definition is published.