Filter Network Traffic
Mitigation · ATTACK:ics:M0937
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:M0937",
"title": "Filter Network Traffic",
"type": "Mitigation",
"source_url": "https://attack.mitre.org/mitigations/M0937",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "course-of-action--11f242bc-3121-438c-84b2-5cbd46a4bb17",
"external_id": "M0937",
"domain": "ics",
"created": "2019-06-11T16:33:55.337Z",
"modified": "2026-05-12T15:12:00.730Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Centre for the Protection of National Infrastructure February 2005",
"url": "https://www.energy.gov/sites/prod/files/Good%20Practices%20Guide%20for%20Firewall%20Deployment.pdf"
}
]
}Explicit source assertions (22)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T1693.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0bdfc1b0-3dd2-4170-a39e-98675202a6d2
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0843.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--246ba662-bd89-4295-b603-582ebad285da
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0869.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b2871ae-e8e6-429e-b9e3-91852d1c5cb8
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0869.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2bfb3a93-422c-4a36-a9c2-c5a9e79477d8
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T1692.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2f8c9deb-aefe-4fa3-b00c-ec15fd154233
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0843
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--366a4cd1-aa95-4985-9d80-b45a2551e298
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0848
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--575f0e0b-d68d-432b-abb3-cbd3e641fc88
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0859
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5dfa5bad-8b0b-4884-bf01-04ea89e3ccf7
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0843.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--619b3740-df20-4974-858f-f8067749d7b0
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0868
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--64db6a39-64d2-4999-97d7-91c28c32f42e
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0861
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--686cbd74-ef49-4e77-9599-21777d3a4738
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T1692.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--703adc98-d4d1-409e-bf20-4e65921ae52f
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0884
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7bfaf0ff-6d88-460f-aa32-3fb0267b4f20
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T1693.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f7df0c0-9cc3-4322-847d-1f4ec35dfa65
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0806
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9a44b2a8-9f4c-43df-9174-1cba6e165886
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0845
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--baf4bd30-4213-43c3-b70c-54418e734caf
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0843.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c91514db-4e02-459e-9ff4-5092fdffb049
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0816
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ca768c2a-0f14-471c-90a5-bce649e88d51
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T1692
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eccbcd3d-ea6e-4e9d-aa15-7b6e0909b6e0
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0800
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee89466e-0655-4217-844d-fb8ea4f76247
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0886
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f0c8a954-c1a0-453a-9c1d-484305abdab2
ATTACK:ics:M0937 → mitigates → ATTACK:ics:T1693
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fc77a4bc-1383-492a-a04b-9062345ced53