Operating modes dictate what change or maintenance functions can be manipulated and are often controlled by a key switch on the PLC (e.g., run, prog [program], and remote) Operating modes and the mechanisms by which they are selected often vary by vendor and product line. Triton contains a file named TS_cnames.py which contains default definitions for program state (TS_progstate). Program state is referenced in TsHi.py. The PLCs logic Is halted, and all outputs may be forced off, while in this mode, outputs are forced off.”]
Source: https://collaborate.mitre.org/attackics/index.php/Technique/T0868