Transient Cyber Asset
Technique · ATTACK:ics:T0864
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T0864",
"title": "Transient Cyber Asset",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T0864",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--35392fb4-a31d-4c6a-b9f2-1c65b7f5e6b9",
"external_id": "T0864",
"domain": "ics",
"created": "2021-10-14T15:25:32.143Z",
"modified": "2026-10-13T17:48:39.050Z",
"version": "1.2",
"aliases": [
],
"tactics": [
"initial-access"
],
"source_references": [
{
"source_name": "North American Electric Reliability Corporation June 2021",
"url": "https://www.nerc.com/pa/Stand/Glossary%20of%20Terms/Glossary_of_Terms.pdf"
}
]
}Explicit source assertions (6)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:M0941 → mitigates → ATTACK:ics:T0864
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2fbb7867-79c5-4d45-9876-98c4041dd72e
National Institute of Standards and Technology April 2013ATTACK:ics:M0947 → mitigates → ATTACK:ics:T0864
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5041e17d-6349-4589-8c61-7b43964b5f9b
Emerson Exchange · National Security Agency February 2016ATTACK:ics:C0020 → uses → ATTACK:ics:T0864
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--59cb471f-ad8b-464f-ab8f-c267f329b0dc
Marshall Abrams July 2008ATTACK:ics:M0949 → mitigates → ATTACK:ics:T0864
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6c15ec9f-2b48-419c-adc1-f989833f6187
ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0864
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--798919d3-df8b-463f-b2be-4c1aa8089384
North America Transmission Forum December 2019ATTACK:ics:M0951 → mitigates → ATTACK:ics:T0864
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b8edcf0a-ec53-4203-b3ad-2cc734a1f1dd