safemode.space
← ESA SPACE-SHIELD
T2004.002
enhancement

Telemetry Protocol Interception

Parent: T2004

Description

An attacker tries to gain knowledge about the Telemetry implementation, including the authentication and encryption status. (Citation: SRC017) Standard/references: (Citation: SRC003) (Citation: SRC006) (Citation: SRC010) (Citation: SRC024)

Mapped SPARTA techniques

3 techniques

  • EXF-0003.02Downlink ExfiltrationST0008
    addresses
    high

    T2004.002 'Telemetry Protocol Interception' is the passive-interception equivalent for the TM/downlink path — direct match to EXF-0003.02's recording of spacecraft-to-ground traffic, recorder playbacks, and payload products.

  • REC-0005.02Downlink InterceptST0001
    addresses
    high

    T2004.002 'Telemetry Protocol Interception' is the direct counterpart of REC-0005.02 Downlink Intercept — downlink is the TM channel.

  • REC-0007Monitor for Safe-Mode IndicatorsST0001
    addresses
    moderate

    Monitoring TM for safe-mode indicators is passive Telemetry Protocol Interception — exactly the scope of T2004.002.

Cite as SafeMode Space, space-shield T2004.002.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.