System Firmware
Subtechnique · ATTACK:ics:T1693.001
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T1693.001",
"title": "System Firmware",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1693/001",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--68a9324d-a524-4766-a899-a026f68a33df",
"external_id": "T1693.001",
"domain": "ics",
"created": "2026-04-20T20:54:18.031Z",
"modified": "2026-10-13T17:48:35.752Z",
"version": "1.0",
"aliases": [
],
"tactics": [
"persistence",
"inhibit-response-function",
"impair-process-control"
],
"source_references": [
{
"source_name": "Basnight, Zachry, et al.",
"url": "http://www.sciencedirect.com/science/article/pii/S1874548213000231"
}
]
}Explicit source assertions (18)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:T1693.001 → subtechnique-of → ATTACK:ics:T1693
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1f886c01-1fff-452e-bb24-009c91be9b69
ATTACK:ics:C0028 → uses → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5068c7c3-5922-447a-bf49-8301e797e992
Ukraine15 - EISAC - 201603ATTACK:ics:M0804 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5f4badb1-5583-4101-84e4-5b6ebdb0c463
ATTACK:ics:M0808 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--72848957-910f-4fa5-8a59-383c0a9dae62
ATTACK:ics:C0063 → uses → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73856fa4-5abb-4341-bf51-1874cc1e6c26
CERT PolskaATTACK:ics:M0947 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--80d77b53-6aa4-4703-946f-6c7f0748f823
ATTACK:ics:M0813 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--81cd1138-ca48-4c06-8964-3fe007b3593a
ATTACK:ics:C0041 → uses → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8d0793f1-e818-4632-8fb6-8c4aa5c7f073
Dragos FROSTYGOOP 2024ATTACK:ics:M0937 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f7df0c0-9cc3-4322-847d-1f4ec35dfa65
ATTACK:ics:M0941 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9315cc99-8e64-4bdc-99b9-6c8ab9b1f5ce
ATTACK:ics:M0801 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a05f4a7a-eebb-463a-97e6-1088b94fa78b
ATTACK:ics:M0802 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a3df8609-d9c4-4ef0-9a58-8d7155fba4f7
ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac8d2d28-5fdc-44d6-9e5a-8e5560b3f91f
Department of Homeland Security September 2016ATTACK:ics:M0807 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b8ce3f0c-7c11-4846-b567-a5d4233b0e6e
Department of Homeland Security September 2016ATTACK:ics:M0946 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d1445579-245b-4698-a7df-365379e0d36d
ESET Research Whitepapers September 2018 · Intel · N/AATTACK:ics:M0951 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e7564f70-9f10-4135-9803-842cd3d2a02f
ATTACK:ics:M0945 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eaa0b30e-1dea-4dad-9a1e-33da933a8158
ATTACK:ics:S1009 → uses → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f65823c1-211b-40bf-a622-407bb511cb3d
DHS CISA February 2019