Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Adversaries may seek to achieve a sustained loss of control or a runaway condition in which operators cannot issue any commands even if the malicious interference has subsided.
Adversaries may cause loss of productivity and revenue through disruption and even damage to the availability and integrity of control system operations, devices, and related processes.
Adversaries may cause a sustained or permanent loss of view where the ICS equipment will require local, hands-on operator intervention; for instance, a restart or manual operation.
Adversaries with privileged network access may seek to modify network traffic in real time using adversary-in-the-middle (AiTM) attacks.
Adversaries may manipulate physical process control within the industrial environment.
Adversaries may attempt to manipulate the information reported back to operators or controllers.
Adversaries may directly interact with the native OS application programming interface (API) to access system functions.
Adversaries may manipulate the I/O image of PLCs through various means to prevent them from functioning as expected.
Adversaries may compromise protective system functions designed to prevent the effects of faults and abnormal conditions.
Adversaries may modify alarm settings to prevent alerts that may inform operators of their presence or to prevent responses to dangerous and unintended scenarios.