Device Restart/Shutdown Technique ID T0816 Tactic Inhibit Response Function Data Sources Network Traffic : Network Traffic Content Application Log : Application Log Content Operational Databases : Device Alarm Asset Field Controller/RTU/PLC/IED/IED. Adversaries may forcibly restart or shutdown a device in an ICS environment to disrupt and potentially negatively impact physical processes. Methods of device restart and shutdown exist in some devices as built-in, standard functionalities. These functionalities can be executed using interactive device web interfaces, CLIs, and network protocol commands.”]
Source: https://collaborate.mitre.org/attackics/index.php/Technique/T0816