T0843.002
enhancement
Online Edit
Parent: T0843
Description
Adversaries may execute an online edit of a PLC to update parts of an existing program. It does not require stopping the PLC which allows it to continue running during transfer and reconfiguration without interruption to process control. Adversaries may leverage this approach to minimize downtime and evade detection. The ability to perform an online edit to the PLC typically relies on access to a workstation with the vendor-specific PLC programming software installed.
Mapped SPARTA techniques
No techniques mapped to this control.
Cite as SafeMode Space, mitre-attack-ics T0843.002.