T0843.003
enhancement
Program Append
Parent: T0843
Description
Adversaries may execute a program append to a PLC to update parts of an existing program. It may or may not require stopping the PLC which may allow it to continue running during transfer and reconfiguration without interruption to process control. Adversaries may leverage this approach to minimize downtime and evade detection. The ability to perform a program append to the PLC typically relies on access to a workstation with the vendor-specific PLC programming software installed.
Mapped SPARTA techniques
No techniques mapped to this control.
Cite as SafeMode Space, mitre-attack-ics T0843.003.