Reporting Message
Subtechnique · ATTACK:ics:T1691.002
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T1691.002",
"title": "Reporting Message",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1691/002",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--7866bb5f-98ee-45c2-984c-8a328c5176b2",
"external_id": "T1691.002",
"domain": "ics",
"created": "2026-04-20T20:54:16.584Z",
"modified": "2026-10-13T17:48:49.952Z",
"version": "1.0",
"aliases": [
],
"tactics": [
"inhibit-response-function"
],
"source_references": [
{
"source_name": "Bonnie Zhu, Anthony Joseph, Shankar Sastry 2011",
"url": "http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6142258"
},
{
"source_name": "Electricity Information Sharing and Analysis Center; SANS Industrial Control Systems March 2016",
"url": "https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blt6a77276749b76a40/607f235992f0063e5c070fff/E-ISAC_SANS_Ukraine_DUC_5%5b73%5d.pdf"
}
]
}Explicit source assertions (6)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:M0810 → mitigates → ATTACK:ics:T1691.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e249f0a-5755-4e0f-96ce-f3ce6376fed5
ATTACK:ics:T1691.002 → subtechnique-of → ATTACK:ics:T1691
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--58978012-8185-4a15-9bbc-6bdb33c91039
ATTACK:ics:S0604 → uses → ATTACK:ics:T1691.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--605dcc44-9e1c-42a9-bc0f-5dfa81444022
Anton Cherepanov, ESET June 2017ATTACK:ics:M0807 → mitigates → ATTACK:ics:T1691.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73ed52f4-4a98-47e7-84bf-5eae555d999d
ATTACK:ics:M0814 → mitigates → ATTACK:ics:T1691.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ae20022f-25b5-4eff-8775-53f1e0ad91b8
ATTACK:ics:C0028 → uses → ATTACK:ics:T1691.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--da38a045-d29a-4c08-9951-c8e520229584
Ukraine15 - EISAC - 201603