Skip to content

Audit

Mitigation · ATTACK:ics:M0947

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:ics:M0947",
  "title": "Audit",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M0947",
  "snapshot": "ics-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--bcf91ebc-f316-4e19-b2f6-444e9940c697",
  "external_id": "M0947",
  "domain": "ics",
  "created": "2019-06-11T17:06:14.029Z",
  "modified": "2026-05-12T15:12:00.731Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (20)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0862

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0491ef92-2941-4841-9fe6-2e1809788b52

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0843

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1c3d966a-5995-48ed-919d-25b972010fe9

IEC February 2019

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0843.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1ddb73e6-b7a8-4f4d-bf8b-f9de3a5ef52a

IEC February 2019

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T1701.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2049ea95-0a5e-4b85-87c6-a8307d4cf738

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0811

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2ff82993-5010-4450-89e7-341f449f3263

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0889

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--34ac1b1b-1103-4fc9-a62e-f1dd1451b28b

IEC February 2019

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0864

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5041e17d-6349-4589-8c61-7b43964b5f9b

Emerson Exchange · National Security Agency February 2016

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0836

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5bf8473c-3c60-4a8a-8514-c2b50ab8a92d

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0851

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5de6bf53-0a02-439b-a8d0-248fa9640a36

IEC February 2019

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0821

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--698d7c50-daab-4087-a7b4-b2bc8dfd81a7

IEC February 2019

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T1693

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6bbb12c3-171d-45a5-a01b-a74b0c0704f0

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T1693.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--80d77b53-6aa4-4703-946f-6c7f0748f823

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0843.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--af861c3e-966c-49aa-86c4-a76102977d16

IEC February 2019

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0830

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b47dbc50-fd8f-4e5b-bb3d-e93b68bf5497

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T1693.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b58f623d-c61f-46e8-b356-09af226ba9ad

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0874

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b72b7dfd-f134-4324-84b8-52ff13fc6b5c

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0859

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--baf7daf3-2116-4051-91b5-f82e146167d0

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0843.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cae90fbb-ba0d-4a9a-9da3-b9f32ab1cd07

IEC February 2019

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0873.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f710e99a-dfe9-4b2b-8b1b-97ab1c9d65f3

ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0873

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f9aa3364-a1eb-4776-ae03-c39b250545a0

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.