MITRE ATT&CKmitigation
M0947 Audit
- Domain
- ics
- Version
- 1.1
- Created
- 2019-06-11
Description
Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. to identify potential weaknesses. Perform periodic integrity checks of the device to validate the correctness of the firmware, software, programs, and configurations. Integrity checks, which typically include cryptographic hashes or digital signatures, should be compared to those obtained at known valid states, especially after events like device reboots, program downloads, or program restarts.
Related
Mitigates · MITRE ATT&CK (20)
- T1701.005 Python sub-technique
- T0843.001 Download All sub-technique
- T0843.002 Online Edit sub-technique
- T0843.003 Program Append sub-technique
- T0873.001 Siemens Project File Format sub-technique
- T1693 Modify Firmware technique
- T1693.001 System Firmware sub-technique
- T1693.002 Module Firmware sub-technique
- T0864 Transient Cyber Asset technique
- T0821 Modify Controller Tasking technique
- T0889 Modify Program technique
- T0811 Data from Information Repositories technique
- T0830 Adversary-in-the-Middle technique
- T0836 Modify Parameter technique
- T0843 Program Download technique
- T0851 Rootkit technique
- T0859 Valid Accounts technique
- T0862 Supply Chain Compromise technique
- T0873 Project File Infection technique
- T0874 Hooking technique