DET0755 Detection of Change Operating Mode
| Item |
Value |
| ID |
DET0755 |
| Version |
1.0 |
| Created |
21 October 2025 |
| Last Modified |
21 October 2025 |
Technique Detected: T0858 (Change Operating Mode)
Analytics
ICS
AN1887
Monitor ICS management protocols for functions that change an asset’s operating mode.
Monitor device application logs which may contain information related to operating mode changes, although not all devices produce such logs.
Monitor alarms for information about when an operating mode is changed, although not all devices produce such logs.
Log Sources
Mutable Elements