Block Operational Technology Message
Technique · ATTACK:ics:T1691
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T1691",
"title": "Block Operational Technology Message",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T1691",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--338f4364-2269-4f70-9079-b20384b16628",
"external_id": "T1691",
"domain": "ics",
"created": "2026-04-20T20:50:34.107Z",
"modified": "2026-10-13T17:48:55.761Z",
"version": "1.0",
"aliases": [
],
"tactics": [
"inhibit-response-function"
],
"source_references": [
{
"source_name": "Bonnie Zhu, Anthony Joseph, Shankar Sastry 2011",
"url": "http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6142258"
},
{
"source_name": "Electricity Information Sharing and Analysis Center; SANS Industrial Control Systems March 2016",
"url": "https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blt6a77276749b76a40/607f235992f0063e5c070fff/E-ISAC_SANS_Ukraine_DUC_5%5b73%5d.pdf"
}
]
}Explicit source assertions (5)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:T1691.002 → subtechnique-of → ATTACK:ics:T1691
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--58978012-8185-4a15-9bbc-6bdb33c91039
ATTACK:ics:M0810 → mitigates → ATTACK:ics:T1691
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69f9597e-a47d-49bb-a182-376349f979ef
ATTACK:ics:T1691.001 → subtechnique-of → ATTACK:ics:T1691
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cfc97955-3fda-4152-94c6-106f58a5579b
ATTACK:ics:M0814 → mitigates → ATTACK:ics:T1691
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d3a24d5e-ae6e-4427-a1db-ae87b7a2b6e4
ATTACK:ics:M0807 → mitigates → ATTACK:ics:T1691
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f76dd26b-2aa3-4fc3-bdef-ddd0632d851b