Automated Response to Suspicious Events

Parent: SI-4

Description

a. Notify [organization-defined parameter] of detected suspicious events; and b. Take the following actions upon detection: [organization-defined parameter].

Mapped SPARTA techniques

114 techniques

DE-0001 Disable Fault ManagementST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002 Disrupt or Deceive DownlinkST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002.02 Jam Link SignalST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002.03 Inhibit Spacecraft FunctionalityST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003 On-Board Values ObfuscationST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.01 Vehicle Command Counter (VCC)ST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.02 Rejected Command CounterST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.03 Command Receiver On/Off ModeST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.04 Command Receivers Received Signal StrengthST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.05 Command Receiver Lock ModesST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.06 Telemetry Downlink ModesST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.07 Cryptographic ModesST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.08 Received CommandsST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.09 System Clock for EvasionST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.10 GPS EphemerisST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.11 Watchdog Timer (WDT) for EvasionST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.12 Poison AI/ML Training for EvasionST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0004 MasqueradingST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0005 Subvert Protections via Safe-ModeST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0006 Modify WhitelistST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0007 Evasion via RootkitST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0008 Evasion via BootkitST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0009.04 Targeted Deception of Onboard SSA/SDA SensorsST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0009.05 Corruption or Overload of Ground-Based SDA SystemsST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0010 Overflow Audit LogST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0001 ReplayST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0001.01 Command PacketsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0001.02 Bus Traffic ReplayST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0002 Position, Navigation, and Timing (PNT) GeofencingST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0003 Modify Authentication ProcessST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0005 Exploit Hardware/Firmware CorruptionST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0005.01 Design FlawsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0005.02 Malicious Use of Hardware CommandsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0006 Disable/Bypass EncryptionST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0007 Trigger Single Event UpsetST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0008 Time Synchronized ExecutionST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0008.01 Absolute Time SequencesST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0008.02 Relative Time SequencesST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009 Exploit Code FlawsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009.01 Flight SoftwareST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009.02 Operating SystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009.03 Known Vulnerability (COTS/FOSS)ST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010 Malicious CodeST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010.01 RansomwareST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010.02 Wiper MalwareST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010.03 RootkitST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010.04 BootkitST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0011 Exploit Reduced Protections During Safe-ModeST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012 Modify On-Board ValuesST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.01 RegistersST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.02 Internal Routing TablesST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.03 Memory Write/LoadsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.04 App/Subscriber TablesST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.05 Scheduling AlgorithmST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.06 Science/Payload DataST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.07 Propulsion SubsystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.08 Attitude Determination & Control SubsystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.09 Electrical Power SubsystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.10 Command & Data Handling SubsystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.11 Watchdog Timer (WDT)ST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.12 System ClockST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.13 Poison AI/ML Training DataST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0013 FloodingST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0013.01 Valid CommandsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0013.02 Erroneous InputST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0014 SpoofingST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0014.01 Time SpoofST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0014.02 Bus Traffic SpoofingST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0014.03 Sensor DataST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0014.04 Position, Navigation, and Timing (PNT) SpoofingST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0015 Side-Channel AttackST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0016.03 Position, Navigation, and Timing (PNT) JammingST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0001 ReplayST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0003 Signal InterceptionST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0003.01 Uplink ExfiltrationST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0003.02 Downlink ExfiltrationST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0004 Out-of-Band Communications LinkST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0009 Compromised Partner SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0010 Payload Communication ChannelST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0003 Crosslink via Compromised NeighborST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0005 Rendezvous & Proximity OperationsST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0005.02 Docked Vehicle / OSAMST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0005.03 Proximity GrapplingST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0006 Compromise Hosted PayloadST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007 Compromise Ground SystemST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.01 Compromise On-Orbit UpdateST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.02 Malicious Commanding via Valid GSST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0008 Rogue External EntityST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0008.01 Rogue Ground StationST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0008.02 Rogue SpacecraftST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009 Trusted RelationshipST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.01 Mission Collaborator (academia, international, etc.)ST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.02 VendorST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.03 User SegmentST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0010 Unauthorized Access During Safe-ModeST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0011 Auxiliary Device CompromiseST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0013 Compromise Host SpacecraftST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0001 Hosted PayloadST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0002 Exploit Lack of Bus SegregationST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0003 Constellation Hopping via CrosslinkST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0004 Visiting Vehicle Interface(s)ST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0005 Virtualization EscapeST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0006 Launch Vehicle InterfaceST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0006.01 Rideshare PayloadST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0001 Memory CompromiseST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0002 BackdoorST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0002.01 Hardware BackdoorST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0002.02 Software BackdoorST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0003 Ground System PresenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0004 Replace Cryptographic KeysST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0005 EavesdroppingST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0005.01 Uplink Intercept EavesdroppingST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0005.02 Downlink InterceptST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0005.03 Proximity OperationsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.

Cite as SafeMode Space, nist-80053-rev5 SI-4(7).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description

›Mapped SPARTA techniques

114 techniques

Description

Mapped SPARTA techniques