Threat Detection Using ICS-ATT&CK and the Dragos Platform
Summary: MITRE announced ICS-ATT&CK, a framework organizing the malicious threat behaviors affecting industrial control systems, with Dragos' ICS intelligence team contributing to categorize and validate public threat behaviors. The framework defines 11 behavioral tactics - including Initial Access, Inhibit Response Function, Impair Process Control, and Impact - refined into 86 techniques, and is separate from the IT-centric Enterprise ATT&CK.
Bottom line: Dragos maps its own Platform detections against ICS-ATT&CK to visualize coverage and gaps, which turns defensive posture into something a team can quantify and take to the C-suite - the question is whether your OT detection coverage can be mapped and defended the same way.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026