← Back to Explore
T1601
Modify System Image
Adversaries may make changes to the operating system of embedded network devices to weaken defenses and provide new capabilities for themselves. On such devices, the operating systems are typically monolithic and most of the device functionality and capabilities are contained within a single file.(Citation: Cisco Networking Software Product Lines)(Citation: Network Device Integrity Methodology) To change the operating system, the adversary typically only needs to affect this one file, replacin...
Network Devices
1
Detections
1
Sources
0
Threat Actors
BY SOURCE
1elastic
PROCEDURES (1)
Kernel Monitoring1 detections
Auto-extracted: 1 detections for kernel monitoring