Activate Firmware Update Mode
Technique · ATTACK:ics:T0800
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T0800",
"title": "Activate Firmware Update Mode",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T0800",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--19a71d1e-6334-4233-8260-b749cae37953",
"external_id": "T0800",
"domain": "ics",
"created": "2020-05-21T17:43:26.506Z",
"modified": "2026-10-13T17:48:54.157Z",
"version": "1.0",
"aliases": [
],
"tactics": [
"inhibit-response-function"
],
"source_references": [
]
}Explicit source assertions (9)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:M0807 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--10626671-941d-4a82-a835-56059058ef87
Department of Homeland Security September 2016ATTACK:ics:M0804 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--63453d2f-30f6-40ab-b32c-506d940ecd20
ATTACK:ics:M0813 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--758d5818-f919-4a6b-9dc2-a212595a11bd
ATTACK:ics:S0604 → uses → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--83c8c216-7ff7-4bd3-9db4-573469628d95
Joe Slowik August 2019ATTACK:ics:M0802 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--afd63145-6033-49e4-ad43-d0b35fa5ed88
ATTACK:ics:M0801 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b3b24837-83ed-46c5-ba80-66a832c7072e
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee89466e-0655-4217-844d-fb8ea4f76247
ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f15f24d2-e581-46ce-83e4-a924f572aae6
Department of Homeland Security September 2016ATTACK:ics:M0800 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff3f0668-98df-44c1-88c2-711f05720eb8