cti-ATT-CK-v13.1/ics-attack/relationship/relationship--06fc6ec4-7857-4f59-9bbf-df373152bcfd.json

{
    "type": "bundle",
    "id": "bundle--217c2f46-98bd-4031-bc92-2f70d905eecc",
    "spec_version": "2.0",
    "objects": [
        {
            "type": "relationship",
            "id": "relationship--06fc6ec4-7857-4f59-9bbf-df373152bcfd",
            "created": "2022-05-11T16:22:58.804Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "revoked": false,
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "modified": "2022-09-26T15:12:43.166Z",
            "description": "Monitor asset alarms which may help identify a loss of communications. Consider correlating alarms with other data sources that indicate traffic has been blocked, such as network traffic. In cases where alternative methods of communicating with outstations exist alarms may still be visible even if messages over serial COM ports are blocked.",
            "relationship_type": "detects",
            "source_ref": "x-mitre-data-component--4c12c1c8-bcef-4daf-8e5b-fca235f71d9e",
            "target_ref": "attack-pattern--1c478716-71d9-46a4-9a53-fa5d576adb60",
            "x_mitre_deprecated": false,
            "x_mitre_version": "1.0",
            "x_mitre_attack_spec_version": "2.1.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5"
        }
    ]
}