aol.pm

Denial of Control

Technique · ATTACK:ics:T0813

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:ics:T0813",
  "title": "Denial of Control",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T0813",
  "snapshot": "ics-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--e33c7ecc-5a38-497f-beb2-a9a2049a4c20",
  "external_id": "T0813",
  "domain": "ics",
  "created": "2020-05-21T17:43:26.506Z",
  "modified": "2025-04-15T19:59:15.775Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [
    "impact"
  ],
  "source_references": [
    {
      "source_name": "Corero",
      "url": "https://www.corero.com/resources/files/whitepapers/cns_whitepaper_ics.pdf"
    },
    {
      "source_name": "Mark Loveless April 2017",
      "url": "https://duo.com/decipher/the-dallas-county-siren-hack"
    },
    {
      "source_name": "Michael J. Assante and Robert M. Lee",
      "url": "https://icscsi.org/library/Documents/White_Papers/SANS%20-%20ICS%20Cyber%20Kill%20Chain.pdf"
    },
    {
      "source_name": "Tyson Macaulay",
      "url": "https://books.google.com/books?id=oXIYBAAAQBAJ&pg=PA249&lpg=PA249&dq=loss+denial+manipulation+of+view&source=bl&ots=dV1uQ8IUff&sig=ACfU3U2NIwGjhg051D_Ytw6npyEk9xcf4w&hl=en&sa=X&ved=2ahUKEwj2wJ7y4tDlAhVmplkKHSTaDnQQ6AEwAHoECAgQAQ#v=onepage&q=loss%20denial%20manipulation%20of%20view&f=false"
    }
  ]
}

Explicit source assertions (7)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:ics:C0066 → uses → ATTACK:ics:T0813

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--19dee45d-8c24-41ac-976f-aeb221c4f658

Dragos Water Under Attack · Tenable Minnesota Water Utilities · Forescout Water Systems Attack

ATTACK:ics:M0810 → mitigates → ATTACK:ics:T0813

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2089201c-c1c6-4d92-a737-a6499e26ee7f

National Institute of Standards and Technology April 2013

ATTACK:ics:M0953 → mitigates → ATTACK:ics:T0813

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--44c857cf-7a4e-405a-87ca-7f6d79000589

Department of Homeland Security October 2009

ATTACK:ics:C0028 → uses → ATTACK:ics:T0813

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--97756c8a-b702-472b-8d67-15464a73093e

Booz Allen Hamilton · Ukraine15 - EISAC - 201603

ATTACK:ics:S0604 → uses → ATTACK:ics:T0813

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9902691c-aaf2-48a1-b1ca-cd6f652ae1c6

Anton Cherepanov, ESET June 2017

ATTACK:ics:M0811 → mitigates → ATTACK:ics:T0813

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--99ec0a8e-4a4f-427c-89db-163e4b206021

M. Rentschler and H. Heine

ATTACK:ics:C0020 → uses → ATTACK:ics:T0813

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--adf2072c-0341-4fc2-9d25-495b4af864e9

Marshall Abrams July 2008

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.