MITRE ATT&CKsub-technique
T1691.001 Command Message
- Domain
- ics
- Tactics
- Inhibit Response Function
- Platforms
- Embedded, Windows, Linux
- Version
- 1.0
- Created
- 2026-04-20
Description
Adversaries may block a command message from reaching its intended target to prevent command execution. In OT networks, command messages are sent to provide instructions to control system devices. A blocked command message can inhibit response functions from correcting a disruption or unsafe condition.
Related
Subtechnique of · MITRE ATT&CK (1)
- T1691 Block Operational Technology Message technique
Tactic · MITRE ATT&CK (1)
- TA0107 Inhibit Response Function tactic
Referenced by MITRE ATT&CK · mitigates (3)
References
- http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6142258 Bonnie Zhu, Anthony Joseph, Shankar Sastry 2011
- https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blt6a77276749b76a40/607f235992f0063e5c070fff/E-ISAC_SANS_Ukraine_DUC_5%5b73%5d.pdf Electricity Information Sharing and Analysis Center; SANS Industrial Control Systems March 2016