T0801 · Monitor Process State

Sunturai

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice

T0801 · Monitor Process State · Sunturai

attack-patternics-attackT0801

Monitor Process State

attack-pattern--2d0d40ad-22fa-4cc8-b264-072557e1364b

Adversaries may gather information about the physical process state. This information may be used to gain more information about the process itself or used as a trigger for malicious actions. The sources of process state information may vary such as, OPC tags, historian data, specific PLC block information, or network traffic.

Created: May 21, 2020, 5:43 PM UTC
Modified: Apr 25, 2025, 3:16 PM UTC

No published detection covers this technique

Nothing in the catalogue maps to it yet. That absence is the finding.

External references

mitre-attackT0801Open reference

Platforms

None

Kill chain phases

collection

Relationships

Incoming and outgoing edges in the selected ATT&CK release.

Incoming and outgoing edges in the selected ATT&CK release
Direction	Type	Related object