Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0832_manipulation-of-view
Adversaries may attempt to manipulate the information reported back to operators or controllers.
Passed 20 of 22 test cases with the skill, and 12 of 22 without it.
and 5 more in the full report
8 fixed12 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
In an industrial control system, an attacker alters sensor readings displayed on an operator's HMI while the physical process runs out of control. Under the MITRE ATT&CK for ICS framework, which tactic phase is this technique assigned to?
| Checked | Without skill | With skill |
|---|---|---|
| classifies the technique under the Impact tactic phase TA0105 | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may attempt to manipulate the information reported back to operators or controllers. This manipulation may be short term or sustained. During this time the process itself could be in a much different state than what is reported.
Operators may be fooled into doing something that is harmful to the system in a loss of view situation. With a manipulated view into the systems, operators may issue inappropriate control sequences that introduce faults or catastrophic failures into the system. Business analysis systems can also be provided with inaccurate data leading to bad management decisions.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Manipulation of View by examining operational technology systems and network architecture.
Review whether mitigations for T0832 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Protocols used for control functions should provide authenticity through MAC functions or digital signatures. If not, utilize bump-in-the-wire devices or VPNs to enforce communication authenticity between devices that are not capable of supporting this (e.g., legacy controllers, RTUs).
Utilize out-of-band communication to validate the integrity of data from the primary channel.
test cases passed, vs 12 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.