Detections
Analytics
Program Upload
Description
Adversaries may attempt to upload a program from a PLC to gather information about an industrial process.
Products, Sensors, and Dependencies
| Product | Dependencies | Data source | Access required | Protocol | Data Collected | Notes |
|---|---|---|---|---|---|---|
| Tenable Vulnerability Management | Advanced Network Scan | Network scans and traffic | Depends on the vendor | Active Connections to controller on management port | Plugin ID: 64582 | |
| Tenable OT Security | Network scans and traffic | Depends on the vendor | Active Connections to controller on management port |
Attack Path Technique Details
Framework: MITRE ATT&CK
Family: Collection
Technique: Program Upload
Sub-Technique: Program Upload
Platform: OT
Products Required: Tenable Vulnerability Management and Tenable OT Security
Tenable Release Date: 2025 Q2