MITRE Engenuity ATT&CK Evaluations for ICS - Results Released
Summary: MITRE Engenuity released its first ATT&CK Evaluations for Industrial Control Systems in 2021, emulating the tactics, techniques, and procedures of the TRISIS/TRITON malware, which the source describes as the first malware tailored to attack safety systems in oil and gas and electrical facilities across the Middle East, Europe, and North America. The Dragos Platform scored 93% in the Visibility category and 63% in Analytics, the highest among participants, where Analytics measures the proportion of sub-steps with a detection that adds MITRE ATT&CK technique context.
Why it matters: The source names a persistent gap: most ICS environments lack detection and collection capability, so a 63% analytics score - the best in the field - still leaves more than a third of the emulated TRITON attack steps without technique-level context for the analyst responding to them.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026