MITRE ATT&CK® Matrix
ICS ATT&CK Matrix
A Glexia-styled visualization of ATT&CK tactics and techniques. This is not the MITRE Navigator UI and does not imply MITRE endorsement.
Collection
11 techniques
T0801Monitor Process StateNoneT0802Automated CollectionNoneT0811Data from Information RepositoriesNoneT0830Adversary-in-the-MiddleNoneT0845Program UploadNoneT0852Screen CaptureNoneT0861Point & Tag IdentificationNoneT0868Detect Operating ModeNoneT0877I/O ImageNoneT0887Wireless SniffingNoneT0893Data from Local SystemNone
Command and Control
3 techniques
Discovery
8 techniques
Evasion
9 techniques
Execution
10 techniques
Impact
12 techniques
T0813Denial of ControlNoneT0815Denial of ViewNoneT0826Loss of AvailabilityNoneT0827Loss of ControlNoneT0828Loss of Productivity and RevenueNoneT0829Loss of ViewNoneT0831Manipulation of ControlNoneT0832Manipulation of ViewNoneT0837Loss of ProtectionNoneT0879Damage to PropertyNoneT0880Loss of SafetyNoneT0882Theft of Operational InformationNone
Impair Process Control
8 techniques
Inhibit Response Function
20 techniques
T0800Activate Firmware Update ModeNoneT0809Data DestructionNoneT0814Denial of ServiceNoneT0816Device Restart/ShutdownNoneT0835Manipulate I/O ImageNoneT0838Modify Alarm SettingsNoneT0851RootkitNoneT0878Alarm SuppressionNoneT0881Service StopNoneT0892Change CredentialNoneT1691Block Operational Technology MessageICST1691.001Command MessageICST1691.002Reporting MessageICST1693Modify FirmwareICST1693.001System FirmwareICST1693.002Module FirmwareICST1695Block CommunicationsICST1695.001Serial COMICST1695.002EthernetICST1695.003Wi-FiICS
Initial Access
12 techniques
T0817Drive-by CompromiseNoneT0819Exploit Public-Facing ApplicationNoneT0822External Remote ServicesNoneT0847Replication Through Removable MediaNoneT0848Rogue MasterNoneT0860Wireless CompromiseNoneT0862Supply Chain CompromiseNoneT0864Transient Cyber AssetNoneT0865Spearphishing AttachmentNoneT0866Exploitation of Remote ServicesNoneT0883Internet Accessible DeviceNoneT0886Remote ServicesNone
Lateral Movement
11 techniques
T0843Program DownloadNoneT0843.001Download AllICST0843.002Online EditICST0843.003Program AppendICST0859Valid AccountsNoneT0866Exploitation of Remote ServicesNoneT0867Lateral Tool TransferNoneT0886Remote ServicesNoneT1694Insecure CredentialsICST1694.001Default CredentialsICST1694.002Hardcoded CredentialsICS
Persistence
10 techniques
Privilege Escalation
2 techniques
Exports
Structured JSON, CSV, and Navigator-layer export generation will use the normalized reference records after full sync. The current page is intentionally lightweight and source-backed.
Source: MITRE ATT&CK®. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation. Glexia is not affiliated with or endorsed by MITRE.