MITRE ATT&CKtechnique

T0802 Automated Collection

Published 2020-05-21 Modified 2026-10-13 Official page ↗
Domain
ics
Tactics
Collection
Platforms
Embedded, Windows, Linux
Version
1.1
Created
2020-05-21

Description

Adversaries may automate collection of industrial environment information using tools or scripts. This automated collection may leverage native control protocols and tools available in the control systems environment. For example, the OPC protocol may be used to enumerate and gather information. Access to a system or interface with these native protocols may allow collection and enumeration of other attached, communicating servers and devices.

Related

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · mitigates (2)

  • M0807 Network Allowlists mitigation
  • M0930 Network Segmentation mitigation

Referenced by MITRE ATT&CK · uses (3)

  • S1072 Industroyer2 software (malware)
  • S0604 Industroyer software (malware)
  • S0093 Backdoor.Oldrea software (malware)