MITRE D3FENDdefensive technique
D3-PUM Platform Uptime Monitoring
- Tactic
- Detect
Definition
Monitor the amount of time since the last power cycle or restart.
How it works
How it works
Monitoring the time since the last power cycle or restart alerts operators to unexpected restarts and their frequency. This can indicate potential issues or malicious activity, and provides valuable information for forensic investigations.
Considerations
The source of the variable may be mutable depending on the platform, and the provenance of the value.
Related
Child of · MITRE D3FEND (1)
- D3-PM Platform Monitoring defensive technique
References
- https://plc-security.com/ Secure PLC Coding Practices: Top 20 List