{"generator":"Threat Intelligence Platform MISP Feed Publisher","tlp":"tlp:white","generated":"2026-09-07T02:55:26+00:00","indicators":[{"ioc_value":"https://web.archive.org/web/20190930124504/https:/www.symantec.com/security-center/writeup/2012-052811-0308-99","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"W32.Flamer","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.broadcom.com/doc/w32-duqu-11-en","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"CVE-2022-34151","ioc_type":"cve","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"CVE-2020-15368","ioc_type":"cve","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"AsrDrv103.sys","ioc_type":"file","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"ecat.fcgi","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"cpu.fcgi","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.darktrace.com/en/blog/post-mortem-of-a-targeted-sodinokibi-ransomware-attack/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://f.hubspotusercontent10.net/hubfs/5943619/Whitepaper-Downloads/Ransomware_in_ICS_Environments_Whitepaper_10_12_20.pdf?utm_referrer=https%3A%2F%2Fwww.dragos.com%2Fresource%2Fransomware-in-ics-environments%2F","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/mcafee-atr-analyzes-sodinokibi-aka-revil-ransomware-as-a-service-what-the-code-tells-us","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.cybereason.com/blog/the-sodinokibi-ransomware-attack","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.darkreading.com/attacks-breaches/how-a-manufacturing-firm-recovered-from-a-devastating-ransomware-attack/d/d-id/1334760","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.nrc.gov/docs/ML1209/ML120900890.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://github.com/MDudek-ICS/TRISIS-TRITON-HATMAN/tree/master/decompiled_code/library","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"TsHi.ExplExec","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"TsHi.ExplWriteRam","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"TsHi.ExplReadRam","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.forescout.com/resources/industroyer2-and-incontroller-report/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.mandiant.com/resources/blog/industroyer-v2-old-malware-new-tricks","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.securonix.com/wp-content/uploads/2021/07/Securonix-Threat-Research-Report-Detecting-LockerGoga.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.dragos.com/blog/industry-news/spyware-stealer-locker-wiper-lockergoga-revisited/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://doublepulsar.com/how-lockergoga-took-down-hydro-ransomware-used-in-targeted-attacks-aimed-at-big-business-c666551f5880","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.hydro.com/en/media/on-the-agenda/cyber-attack/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.bloomberg.com/news/features/2019-12-03/merck-cyberattack-s-1-3-billion-question-was-it-an-act-of-war","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.youtube.com/watch?v=eywmb7UDODY&feature=youtu.be&t=939","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://pdfs.semanticscholar.org/18df/43ef1690b0fae15a36f770001160aefbc6c5.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://ics-cert.us-cert.gov/advisories/ICSA-14-178-01","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.fortinet.com/blog/threat-research/ekans-ransomware-targeting-ot-ics-systems","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://dragos.com/resource/magnallium/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.wired.com/story/iran-hackers-us-phishing-tensions/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.symantec.com/security-center/writeup/2017-030708-4403-99","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"Trojan.Stonedrill","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://thedfirreport.com/2020/10/18/ryuk-in-5-hours/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://news.sophos.com/en-us/2020/10/14/inside-a-new-ryuk-ransomware-attack/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://web.archive.org/web/20220707091904/https://www.operationblockbuster.com/wp-content/uploads/2016/02/Operation-Blockbuster-Report.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.securityweek.com/five-threat-groups-target-industrial-systems-dragos","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.cyberscoop.com/xenotime-ics-cyber-attacks-trisis-dragos/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://dragos.com/wp-content/uploads/Dragos-Oil-and-Gas-Threat-Perspective-2019.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://dragos.com/resource/chrysene/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://unit42.paloaltonetworks.com/the-oilrig-campaign-attacks-on-saudi-arabian-organizations-deliver-helminth-backdoor/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.us-cert.gov/ics/alerts/ICS-ALERT-14-281-01B","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.us-cert.gov/ics/advisories/ICSA-11-094-02B","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.welivesecurity.com/2022/04/12/industroyer2-industroyer-reloaded/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S0687).(Citation:","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.broadcom.com/doc/dragonfly_threat_against_western_energy_suppliers#:~:text=The%20attackers%2C%20known%20to%20Symantec","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://web.archive.org/web/20220120001230/https://www.cyberviser.com/2018/05/group-linked-to-shamoon-attacks-targeting-ics-networks-in-middle-east-and-uk/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.eisac.com/public-news-detail?id=115909","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.welivesecurity.com/2018/04/03/lazarus-killdisk-central-american-casino/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://ieeexplore.ieee.org/document/6505877","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://cwe.mitre.org/data/definitions/227.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://owasp.org/www-project-top-ten/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://apps.nsa.gov/iaarchive/library/ia-guidance/security-configuration/industrial-control-systems/position-zero-integrity-checking-windows-based-ics-scada-systems.cfm","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://emersonexchange365.com/products/control-safety-systems/f/plc-pac-systems-industrial-computing-forum/8383/increase-security-with-tpm-secure-boot-and-trusted-boot","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.mitre.org/sites/default/files/publications/pr-20-01465-37-trusting-our-supply-chains-a-comprehensive-data-driven-approach.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.trustedcomputinggroup.org/wp-content/uploads/Trusted-Platform-Module-Summary_04292008.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.intel.com/content/dam/www/public/us/en/documents/white-papers/security-technologies-4th-gen-core-retail-paper.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/attractive-accounts-for-credential-theft","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/ncas/alerts/TA13-175A","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.langner.com/2018/11/why-ethernet-ip-changes-the-ot-asset-discovery-game/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.rtautomation.com/rtas-blog/still-a-thrill-opc-ua-device-discovery/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.csiac.org/journal-article/practical-industrial-control-system-ics-cybersecurity-it-and-ot-have-converged-discover-and-defend-your-assets/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://cdn.selinc.com/assets/Literature/Publications/Technical%20Papers/6891_HowSDN_CG_20180720_Web2.pdf?v=20190312-231901","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.helpnetsecurity.com/2019/07/10/bacnet-devices/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://msrc-blog.microsoft.com/2017/08/09/moving-beyond-emet-ii-windows-defender-exploit-guard/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"Windows.Graphics.Capture","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://cdn.selinc.com/assets/Literature/Publications/Application%20Notes/AN2015-08_20150817.pdf?","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.natf.net/docs/natf/documents/resources/security/natf-transient-cyber-asset-guidance.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-41r1.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.sans.org/reading-room/whitepapers/ICS/protect-critical-infrastructure-systems-whitelisting-35312","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.exida.com/images/uploads/18492275-Alarm-Management-for-Process-Control.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"CVE-2014-9195","ioc_type":"cve","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"s1.txt","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"lun.vbs","ioc_type":"file","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"ufn.vbs","ioc_type":"file","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"ntds.dit","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.wpxi.com/news/local/officials-investigating-cyberattack-municipal-water-authority-aliquippa/K5A3BEW35RAXJPMNHNE35RZ7WA/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.bloomberg.com/news/articles/2023-12-22/iranian-linked-hacks-expose-failure-to-safeguard-us-water-system","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.zdnet.com/article/how-hackers-attacked-ukraines-power-grid-implications-for-industrial-iot-security/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.wired.com/story/russian-hackers-attack-ukraine/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://nsarchive.gwu.edu/sites/default/files/documents/3891751/SANS-and-Electricity-Information-Sharing-and.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://web.archive.org/web/20190202205824/https://www.fireeye.com/blog/threat-research/2018/10/triton-attribution-russian-government-owned-lab-most-likely-built-tools.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/groups/G0088)\u2019","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0724","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0905","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0911","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0741","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0755","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0779","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0735","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0762","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0800","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0902","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0742","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0758","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0739","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0791","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0803","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0914","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0750","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0768","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0790","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0798","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0729","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0794","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0733","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0774","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0796","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0910","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0757","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0908","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0775","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0915","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0746","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0760","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0743","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0781","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0764","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0765","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0756","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0747","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0773","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0740","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0763","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0754","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0722","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0792","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0795","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0748","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0744","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0782","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0759","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0772","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0777","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0783","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0726","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0804","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0904","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0799","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0752","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0761","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0903","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0802","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0907","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0767","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0787","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0745","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0727","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0753","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0730","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0909","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0788","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0912","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0793","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0797","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0785","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0776","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0734","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0770","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0737","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0751","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0749","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0778","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0736","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0771","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0906","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0913","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0784","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0732","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0786","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0801","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0769","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0728","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0738","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0731","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0766","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0723","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0725","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0789","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0780","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/dotnet/api/system.reflection.module","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows/win32/api/libloaderapi/nf-libloaderapi-loadlibrarya","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0011","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://www.linux.com/news/introduction-services-runlevels-and-rcd-scripts/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/dotnet/framework/windows-services/introduction-to-windows-service-applications","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0019","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows/win32/taskschd/tasks","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0003","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows-server/storage/nfs/nfs-overview","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0033","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0039","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/sysinternals/downloads/sysmon#event-id-9-rawaccessread","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0016","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows/win32/fileio/file-management","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0022","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-logon-events","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0028","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://confluence.atlassian.com/doc/working-with-confluence-logs-108364721.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0015","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0040","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging_windows?view=powershell-7","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows/win32/amsi/antimalware-scan-interface-portal","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0012","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/windows/win32/sysinfo/registry","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0024","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datasources/DS0002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0012","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0102","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0063","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"checks.Examples","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0004","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0110","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"com.apple.applescript","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0029","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0108","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"admin.googleapis.com","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"session.token.reuse","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"vim.fault","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"compute.instances.osLogin","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"cloud.ssh.publicKey.inserted","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"Microsoft.Compute","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"app.oauth.grant","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"203.0.113.55","ioc_type":"ip","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"10.0.0.5","ioc_type":"ip","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"192.168.1.100","ioc_type":"ip","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0067","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0107","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0111","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"launchd.plist","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0005","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"com.apple.launchservices","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0041","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0065","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0060","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0046","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0109","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"com.apple.diskarbitration","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0042","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"google.iam.credentials.generateAccessToken","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"policy.mfa.bypass","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"app.oauth2.as.authorize","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"user.session.start","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0088","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/datacomponents/DC0045","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0801#AN1933","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0904#AN2047","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0795#AN1927","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0758#AN1890","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0908#AN2051","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0756#AN1888","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0787#AN1919","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0728#AN1861","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0759#AN1891","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0780#AN1912","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0742#AN1875","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0913#AN2056","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0734#AN1867","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0911#AN2054","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0724#AN1857","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0740#AN1873","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0772#AN1904","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1140)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0791#AN1923","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0785#AN1917","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0771#AN1903","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0799#AN1931","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0723#AN1856","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0732#AN1865","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0778#AN1910","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0903#AN2046","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0774#AN1906","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0743#AN1876","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0752#AN1884","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0738#AN1871","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0798#AN1930","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0764#AN1896","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0753#AN1885","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0733#AN1866","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0736#AN1869","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0802#AN1934","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0886)).\\nMonitor","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0745#AN1878","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0744#AN1877","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0859).\\nWhen","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0803#AN1935","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0779#AN1911","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0757#AN1889","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0768#AN1900","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0730#AN1863","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0783#AN1915","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0790#AN1922","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0796#AN1928","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0729#AN1862","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0786#AN1918","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1049)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0770#AN1902","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://x.com/ItsReallyNick/status/1055321652777619457","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0725#AN1858","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0755#AN1887","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0773#AN1905","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0737#AN1870","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0760#AN1892","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0766#AN1898","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1489).\\nAlterations","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1489).\\nMonitor","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0765#AN1897","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0906#AN2049","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0769#AN1901","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1018).\\n","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0909#AN2052","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0751#AN1883","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0762#AN1894","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0902#AN2045","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1566/001).\\nMonitor","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0781#AN1913","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:01","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1070)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0750#AN1882","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0907#AN2050","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0776#AN1908","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0788#AN1920","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://web.archive.org/web/20170313124421/http://www.intelsecurity.com/advanced-threat-research/content/data/HT-UEFI-rootkit.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0731#AN1864","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0910#AN2053","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0767#AN1899","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0914#AN2057","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0761#AN1893","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0789#AN1921","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0747#AN1880","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0792#AN1924","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0797#AN1929","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0777#AN1909","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0782#AN1914","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1557/001).\\nSpoofed","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0746#AN1879","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0739#AN1872","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0735#AN1868","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0748#AN2066","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0775#AN1907","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0800#AN1932","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0848)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0848).\\nMonitor","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0794#AN1926","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0793#AN1925","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://apps.dtic.mil/sti/pdfs/ADA466332.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://docs.nzyme.org/wifi/monitoring/network-monitoring/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0726#AN1859","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0915#AN2058","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0741#AN1874","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0763#AN1895","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0727#AN1860","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://docs.microsoft.com/en-us/microsoft-365/compliance/use-sharing-auditing?view=o365-worldwide#sharepoint-sharing-events","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0754#AN1886","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0784#AN1916","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0905#AN2048","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0912#AN2055","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0722#AN1855","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0859).\\nMonitor","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0859)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0804#AN1936","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1059/001).\\nMonitor","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/detectionstrategies/DET0749#AN1881","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0106","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0103","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0100","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0101","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0104","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0110","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0879)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0882)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0105","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0108","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0102","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0100)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0109","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0111","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0103)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0107","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/matrices/ics","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0007","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0006","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.ietf.org/rfc/rfc4949.txt","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0014","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0015","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0016","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0003","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0008","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0017","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0005","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://sigtto.org/media/3457/sigtto-2021-esd-systems.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0010","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0009","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0018","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0013","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0004","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0012","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0011","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0889","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1695","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.darkreading.com/attacks-breaches/lights-out-cyberattacks-shut-down-building-automation-systems","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0892","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0802)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0853)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0807)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0893","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0819)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0822)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://documents.trendmicro.com/assets/white_papers/wp-caught-in-the-act-running-a-realistic-factory-honeypot-to-capture-real-threats.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.us-cert.gov/sites/default/files/Monitors/ICS-CERT_Monitor_Jan-April2014.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0883","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0839","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1570/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0867","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0842)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://en.wikipedia.org/wiki/Netstat","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/wiki/Technique/T1049","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0840","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"http://www.plcdev.com/book/export/html/373","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://infosys.beckhoff.com/english.php?content=../content/1033/tc3_sourcecontrol/18014398915785483.html&id=","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0873","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0885","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0878)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0838","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://duo.com/decipher/the-dallas-county-siren-hack","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0813","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0824","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0823)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0859).\\n\\nSpecific","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0886","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1692","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.mitre.org/sites/default/files/pdf/08%201145.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0833","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0869","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0843/002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/wiki/Technique/T1090","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0884","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0818","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/wiki/Technique/T1018","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0846","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1068/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0890","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0859","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0891","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0852","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://bacnet.org/wp-content/uploads/sites/4/2022/06/Newman_2010.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0846/002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"W32.Ramnit","ioc_type":"other","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/malware-discovered-in-german-nuclear-power-plant","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://arstechnica.com/information-technology/2016/04/german-nuclear-plants-fuel-rod-system-swarming-with-old-malware/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.sciencealert.com/multiple-computer-viruses-have-been-discovered-in-this-german-nuclear-plant","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://web.archive.org/web/20160430041256/https://www.geek.com/apps/german-nuclear-plant-found-riddled-with-conficker-other-viruses-1653415/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.kkw-gundremmingen.de/presse.php?id=571","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.welivesecurity.com/2016/04/28/malware-found-german-nuclear-power-plant/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.darkreading.com/endpoint/german-nuclear-power-plant-infected-with-malware/d/d-id/1325298","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.reuters.com/article/us-nuclearpower-cyber-germany/german-nuclear-plant-infected-with-computer-viruses-operator-says-idUSKCN0XN2OS","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.bbc.com/news/technology-36158606","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0847","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0889)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0821)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0843","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0849","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0857","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://time.com/4270728/iran-cyber-attack-dam-fbi/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.wsj.com/articles/iranian-hackers-infiltrated-new-york-dam-in-2013-1450662559","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0882","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0826","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1106/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0834","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0848","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0823","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.symantec.com/content/en/us/enterprise/media/security%20response/whitepapers/w32%20stuxnet%20dossier.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"http://www.dee.ufrj.br/controle%20automatico/cursos/IEC61131-3%20Programming%20Industrial%20Automation%20Systems.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0844","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0808","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1179/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0874","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0875","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0827","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0820","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0855)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0836)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0856)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0804)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.sans.org/reading-room/whitepapers/ICS/man-in-the-middle-attack-modbus-tcp-illustrated-wireshark-38095","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0830","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0870","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0806","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/wiki/Technique/T1133","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0822","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0812","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1210/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0866","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0856","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0828)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0827)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0880)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Securitysituation/IT-Security-Situation-in-Germany-2014.pdf?__blob=publicationFile&v=3","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0879","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0814).(Citation:","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0851)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0886)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0862)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0847)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0107)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0106)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1693","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1691/002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0817","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0895","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0843/001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.researchgate.net/publication/228849043_Leveraging_ethernet_card_vulnerabilities_in_field_devices","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1693/002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0825","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1695/003","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0812)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1694/002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"http://www.sciencedirect.com/science/article/pii/S1874548213000231","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1693/001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.cisco.com/c/en/us/td/docs/security/cyber_vision/publications/Active-Discovery/Release-4-3-0/b_Cisco_Cyber_Vision_Active_Discovery_Configuration_Guide.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0846/003","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0863)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1193/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0865","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://securityaffairs.co/wordpress/104749/cyber-crime/ransomware-attack-hit-lion.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://lionco.com/2020/06/26/lion-update-re-cyber-issue/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.colpipe.com/news/press-releases/media-statement-colonial-pipeline-system-disruption","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0828","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1695/002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0880","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0854","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.controlglobal.com/industrynews/2019/yokogawa-announcement-warns-of-counterfeit-transmitters/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0862","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0866))","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0890)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0820)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0102)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0846/001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0871","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0843/003","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0815","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r2.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1694/001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1695/001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0834)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0877","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0872","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://nmap.org/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0841","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1692/002","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://dragos.com/wp-content/uploads/CRASHOVERRIDE2018.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0810","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0832","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/wiki/Technique/T1107","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0809","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0105).(Citation:","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1692/001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.zdnet.com/article/experts-think-they-know-how-dallas-emergency-sirens-were-hacked/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://statescoop.com/tornado-sirens-in-dallas-suburbs-deactivated-after-being-hacked-and-set-off/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0855","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0804","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r3.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.forescout.com/resources/ot-icefall-report/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.cisa.gov/news-events/ics-alerts/ics-alert-13-164-01","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1694","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0802","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/wiki/Technique/T1014","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0851","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/wiki/Technique/T1040","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0842","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.ezautomation.net/industry-articles/plc-ladder-logic-basics.htm","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.scribd.com/document/458637574/Programmable-Logic-Controllers","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0835","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0109)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0110)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0104)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0873/001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.nerc.com/pa/Stand/Glossary%20of%20Terms/Glossary_of_Terms.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0864","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/ncas/alerts/TA18-074A","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0811","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0830)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0814))","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0881)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0851))","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0874)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0839)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0857)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1691","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0819","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0845","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0888","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0853","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0801","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0837","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0868","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://troopers.de/downloads/troopers19/TROOPERS19_NGI_IoT_diet_poisoned_fruit.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0878","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0843)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0845)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.plcgurus.net/plc-basics/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.omron-ap.com/service_support/FAQ/FAQ00002/index.asp#:~:text=In%20PROGRAM%20mode%2C%20the%20CPU","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://forumautomation.com/t/what-are-the-different-operating-modes-in-plc/2489","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"http://www.machine-information-systems.com/How_PLCs_Work.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0858","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.blackhat.com/docs/us-14/materials/us-14-Bolshev-ICSCorsair-How-I-Will-PWN-Your-ERP-Through-4-20mA-Current-Loop-WP.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.slideshare.net/slideshow/17-bolshev-1-13/32178888","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0860","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/sites/default/files/publications/AA21-201A_Chinese_Gas_Pipeline_Intrusion_Campaign_2011_to_2013%20(1).pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.f-secure.com/weblog/archives/00002718.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0863","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0816","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.radioworld.com/industry/understanding-plc-programming-methods-and-the-tag-database-system","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0861","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/wiki/Technique/T1059","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0807","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0850","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0871))","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0894","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"10.0.0.1","ioc_type":"ip","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0805","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0816)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0888)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://nvd.nist.gov/vuln/detail/CVE-2015-5374","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"CVE-2015-5374","ioc_type":"cve","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://ics-cert.us-cert.gov/advisories/ICSA-15-202-01","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.us-cert.gov/ics/alerts/ICS-ALERT-17-102-01A","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"http://cwe.mitre.org/data/definitions/400.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0814","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://inhomelandsecurity.com/teen_hacker_in_poland_plays_tr/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.londonreconnections.com/2017/hacked-cyber-security-railways/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.schneier.com/blog/archives/2008/01/hacking_the_pol.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0831","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0800","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1691/001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://books.google.com/books?id=oXIYBAAAQBAJ&pg=PA249&lpg=PA249&dq=loss+denial+manipulation+of+view&source=bl&ots=dV1uQ8IUff&sig=ACfU3U2NIwGjhg051D_Ytw6npyEk9xcf4w&hl=en&sa=X&ved=2ahUKEwj2wJ7y4tDlAhVmplkKHSTaDnQQ6AEwAHoECAgQAQ#v=onepage&q=loss%20denial%20manipulation%20of%20view&f=false","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://icscsi.org/library/Documents/White_Papers/SANS%20-%20ICS%20Cyber%20Kill%20Chain.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.corero.com/resources/files/whitepapers/cns_whitepaper_ics.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0829","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://arstechnica.com/information-technology/2017/04/dallas-siren-hack-used-radio-signals-to-spoof-alarm-says-city-manager/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://nvlpubs.nist.gov/nistpubs/ams/NIST.AMS.300-4.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.bastille.net/blogs/2017/4/17/dallas-siren-attack","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0887","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://webstore.iec.ch/publication/4552","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0821","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/tactics/TA0105)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0836","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T1489/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0881","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blt6a77276749b76a40/607f235992f0063e5c070fff/E-ISAC_SANS_Ukraine_DUC_5%5b73%5d.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6142258","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/techniques/T0803","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1045)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://download.schneider-electric.com/files?p_Doc_Ref=SESB-2022-01","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.mandiant.com/resources/incontroller-state-sponsored-ics-tool","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://media.defcon.org/DEF%20CON%2030/DEF%20CON%2030%20presentations/Jimmy%20Wylie%20-%20Analyzing%20PIPEDREAM%20Challenges%20in%20testing%20an%20ICS%20attack%20toolkit.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://hub.dragos.com/hubfs/116-Whitepapers/Dragos_ChernoviteWP_v2b.pdf?hsLang=en","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.cisa.gov/uscert/ncas/alerts/aa22-103a","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1045","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1165","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1000)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.welivesecurity.com/wp-content/uploads/200x/white-papers/ESET_ACAD_Medre_A_whitepaper.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1000","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0017)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.dragos.com/blog/industry-news/ekans-ransomware-misconceptions-and-misunderstandings/#_edn7","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://pylos.co/2020/01/28/getting-the-story-right-and-why-it-matters/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://blog.malwarebytes.com/threat-analysis/2020/06/honda-and-enel-impacted-by-cyber-attack-suspected-to-be-ransomware/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.forbes.com/sites/daveywinder/2020/06/10/honda-hacked-japanese-car-giant-confirms-cyber-attack-on-global-operations-snake-ransomware/?sh=2725c35753ad","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0017","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://claroty.com/team82/research/unpacking-the-blackjack-groups-fuxnet-malware","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1157","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1157)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0004)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0004","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.youtube.com/watch?v=f09E75bWvkk&index=3&list=PL8OWO1qWXF4qYG19p7An4Vw3N2YZ86aRS&t=0s","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2017-347-01+Triconex+V3.pdf&p_Doc_Ref=SEVD-2017-347-01","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.youtube.com/watch?v=XwSJ8hloGvY","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.midnightbluelabs.com/blog/2018/1/16/analyzing-the-triton-industrial-malware","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://dragos.com/blog/trisis/TRISIS-01.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://ics-cert.us-cert.gov/sites/default/files/documents/MAR-17-352-01%20HatMan%20-%20Safety%20System%20Targeted%20Malware%20%28Update%20B%29.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1009","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.welivesecurity.com/2016/01/03/blackenergy-sshbeardoor-details-2015-attacks-ukrainian-news-media-electric-industry/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0016","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1006)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.blackhat.com/docs/asia-16/materials/asia-16-Spenneberg-PLC-Blaster-A-Worm-Living-Solely-In-The-PLC-wp.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.blackhat.com/docs/asia-16/materials/asia-16-Spenneberg-PLC-Blaster-A-Worm-Living-Solely-In-The-PLC.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/software/S1006","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0012)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://support.symantec.com/us/en/article.tech93179.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0012","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0010)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://scadahacker.com/resources/stuxnet-mitigation.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.us-cert.gov/ics/advisories/ICSA-10-238-01B","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.symantec.com/security-center/writeup/2010-071400-3123-99","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0010","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0005)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0005","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Impact)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0001)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://dragos.com/wp-content/uploads/CRASHOVERRIDE.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/ncas/alerts/TA17-163A","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.dragos.com/wp-content/uploads/CrashOverride-01.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://collaborate.mitre.org/attackics/index.php/Software/S0001","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/groups/G1027","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/groups/G1000)s","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/groups/G1000)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://dragos.com/resource/allanite/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/groups/G1000","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.dhs.gov/sites/default/files/saver-msr-rf-detection_cod-508_10july2019.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/ncas/tips/ST05-003","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0806","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/sites/default/files/recommended_practices/Recommended%20Practice%20Updating%20Antivirus%20in%20an%20Industrial%20Control%20System_S508C.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0949","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0954","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0922","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0811","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0918","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://webstore.iec.ch/publication/6912","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://standards.ieee.org/standard/1686-2013.html","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0800","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0916","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0932","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0917","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0812","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0919","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0942","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0802","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0947","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.darpa.mil/program/rapid-attack-detection-isolation-and-characterization-systems","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0810","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/sites/default/files/recommended_practices/final-RP_ics_cybersecurity_incident_response_100609.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0953","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0817","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0937)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0807","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0941","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0934","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0928","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0809","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0815","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0951","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.icheme.org/media/9906/xviii-paper-23.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0805","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0946","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0913","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0936","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0808","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0813","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0945","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0920","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M1052)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0926)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0918)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0927)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0936)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0932)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0804","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0926","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0927","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0814","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0938","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0935","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0950","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0816","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://doi.org/10.6028/NIST.SP.1800-2","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://us-cert.cisa.gov/sites/default/files/recommended_practices/RP_Managing_Remote_Access_S508NC.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0801","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0803","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0924","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0931","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0915","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0944","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://webstore.iec.ch/publication/34421","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://webstore.iec.ch/publication/7033","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0930","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://plc-security.com/content/Top_20_Secure_PLC_Coding_Practices_V1.0.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0818","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0921","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.energy.gov/sites/prod/files/Good%20Practices%20Guide%20for%20Firewall%20Deployment.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0937","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/mitigations/M0948","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0002)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/assets/A0003)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/groups/G1027)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/campaigns/C0031)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://veronews.com/2023/12/15/hackers-in-iran-attack-computer-at-vero-utilities/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://apnews.com/article/hackers-iran-israel-water-utilities-critical-infrastructure-cisa-554b2aa969c8220016ab2ef94bd7635b","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/campaigns/C0031","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/campaigns/C0020)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.mitre.org/sites/default/files/pdf/08_1145.pdf","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/campaigns/C0020","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/campaigns/C0009)","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.dragos.com/blog/industry-news/recommendations-following-the-oldsmar-water-treatment-facility-cyber-attack/","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.youtube.com/watch?v=MkXDSOgLQ6M","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://www.cisa.gov/uscert/ncas/alerts/aa21-042a","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"},{"ioc_value":"https://attack.mitre.org/campaigns/C0009","ioc_type":"url","category":"ICS ATT&CK","threat_score":"0.50","confidence_score":"0.50","first_seen":"2026-08-06 13:09:23","last_seen":"2026-08-24 12:52:00","tlp":"tlp:white"}]}