Automated Collection
Technique · ATTACK:ics:T0802
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T0802",
"title": "Automated Collection",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T0802",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--3de230d4-3e42-4041-b089-17e1128feded",
"external_id": "T0802",
"domain": "ics",
"created": "2020-05-21T17:43:26.506Z",
"modified": "2026-10-13T17:48:36.361Z",
"version": "1.1",
"aliases": [
],
"tactics": [
"collection"
],
"source_references": [
]
}Explicit source assertions (5)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:M0807 → mitigates → ATTACK:ics:T0802
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6f0384e6-73c8-4fc7-bc0c-0a8c2bfa473d
ATTACK:ics:S1072 → uses → ATTACK:ics:T0802
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6ff846b1-9444-45f1-837a-4eeeb16bdfe7
Industroyer2 Forescout July 2022ATTACK:ics:S0093 → uses → ATTACK:ics:T0802
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f76d408-be8a-478e-8a5a-aab1d1f96572
Daavid Hentunen, Antti Tikkanen June 2014ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0802
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a08d85dd-a8b3-4848-94aa-941c43b6d8f2
ATTACK:ics:S0604 → uses → ATTACK:ics:T0802
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c4122b58-f1b2-4656-a715-55016700bf75
Anton Cherepanov, ESET June 2017