cti-ATT-CK-v13.1/ics-attack/course-of-action/course-of-action--3172222b-4983-43f7-8983-753ded4f13bc.json

{
    "type": "bundle",
    "id": "bundle--ca7991c9-520c-4a00-a9ee-1802130364f5",
    "spec_version": "2.0",
    "objects": [
        {
            "modified": "2023-03-30T20:55:18.665Z",
            "name": "Network Intrusion Prevention",
            "description": "Use intrusion detection signatures to block traffic at network boundaries.  In industrial control environments, network intrusion prevention should be configured so it will not disrupt protocols and communications responsible for real-time functions related to control or safety.",
            "labels": [
                "IEC 62443-3-3:2013 - SR 6.2",
                "IEC 62443-4-2:2019 - CR 6.2",
                "NIST SP 800-53 Rev. 4 - SI-4"
            ],
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "x_mitre_domains": [
                "ics-attack"
            ],
            "x_mitre_version": "1.0",
            "x_mitre_attack_spec_version": "2.1.0",
            "type": "course-of-action",
            "id": "course-of-action--3172222b-4983-43f7-8983-753ded4f13bc",
            "created": "2019-06-10T20:46:02.263Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "external_references": [
                {
                    "source_name": "mitre-attack",
                    "url": "https://attack.mitre.org/mitigations/M0931",
                    "external_id": "M0931"
                }
            ],
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ]
        }
    ]
}