Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0845_program-upload
Adversaries may attempt to upload a program from a PLC to gather information about an industrial process.
Passed 18 of 21 test cases with the skill, and 6 of 21 without it.
and 20 more in the full report
13 fixed6 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
When establishing role-based access control (RBAC) on field controllers to limit which personnel can perform logic uploads, which MITRE ATT&CK ICS mitigation code specifically governs authorization enforcement?
| Checked | Without skill | With skill |
|---|---|---|
| Cites M0800 Authorization Enforcement for role-based restrictions on field controllers. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may attempt to upload a program from a PLC to gather information about an industrial process. Uploading a program may allow them to acquire and study the underlying logic. Methods of program upload include vendor software, which enables the user to upload and read a program running on a PLC. This software can be used to upload the target program to a workstation, jump box, or an interfacing device.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Program Upload by examining operational technology systems and network architecture.
Review whether mitigations for T0845 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Authenticate connections from software and devices to prevent unauthorized systems from accessing protected management functions.
Protocols used for device management should authenticate all network messages to prevent unauthorized system changes.
test cases passed, vs 6 / 21 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.