Detections
Analytics
Device Restart/Shutdown
Description
Adversaries may forcibly restart or shutdown a device in an ICS environment to disrupt and potentially negatively impact physical processes. Methods of device restart and shutdown exist in some devices as built-in, standard functionalities. These functionalities can be executed using interactive device web interfaces, CLIs, and network protocol commands.
Products, Sensors, and Dependencies
| Product | Dependencies | Data source | Access required | Protocol | Data Collected | Notes |
|---|
Attack Path Technique Details
Framework: MITRE ATT&CK
Family: Inhibit Response Function
Technique: Device Restart/Shutdown
Products Required: Tenable Vulnerability Management and Tenable OT Security