DET0773 Detection of Manipulate I/O Image
| Item | Value |
|---|---|
| ID | DET0773 |
| Version | 1.0 |
| Created | 21 October 2025 |
| Last Modified | 21 October 2025 |
Technique Detected: T0835 (Manipulate I/O Image)
Analytics
ICS
AN1905
A manipulated I/O image requires analyzing the application program running on the PLC for specific data block writes. Detecting this requires obtaining and analyzing a PLC’s application program, either directly from the device or from asset management platforms.
Log Sources
| Data Component | Name | Channel |
|---|---|---|
| Software (DC0111) | Asset | None |
Mutable Elements
| Field | Description |
|---|---|