Modify Program Technique ID T0889 Tactic Persistence Data Sources File : File Modification Asset : Software/Firmware Asset Field Controller/RTU/PLC/IED. Adversaries may modify or add a program on a controller to affect how it interacts with the physical process, peripheral devices and other hosts on the network. Modification to controller programs can be accomplished using a Program Download in addition to other types of program modification such as online edit and program append. Some programs allow an adversary to interact directly with the API of the controller to take advantage of obscure features or vulnerabilities.”]
Source: https://collaborate.mitre.org/attackics/index.php/Technique/T0889