MITRE ATT&CKtactic

TA0106 Impair Process Control

Published 2018-10-17 Modified 2025-04-16 Official page ↗
Domain
ics
Version
1.0
Created
2018-10-17

Description

The adversary is trying to manipulate, disable, or damage physical control processes. Impair Process Control consists of techniques that adversaries use to disrupt control logic and cause determinantal effects to processes being controlled in the target environment. Targets of interest may include active procedures or parameters that manipulate the physical environment. These techniques can also include prevention or manipulation of reporting elements and control logic. If an adversary has modified process functionality, then they may also obfuscate the results, which are often self-revealing in their impact on the outcome of a product or the environment. The direct physical control these techniques exert may also threaten the safety of operators and downstream users, which can prompt response mechanisms. Adversaries may follow up with or use Inhibit Response Function techniques in tandem, to assist with the successful abuse of control processes to result in Impact.

Related

Referenced by MITRE ATT&CK · tactic (8)

  • T1692 Unauthorized Message technique
  • T1692.001 Command Message sub-technique
  • T1692.002 Reporting Message sub-technique
  • T1693 Modify Firmware technique
  • T1693.001 System Firmware sub-technique
  • T1693.002 Module Firmware sub-technique
  • T0806 Brute Force I/O technique
  • T0836 Modify Parameter technique