This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features. To visit this techniques new page please go to and update your links to https://attack.mitre.org/techniques/T0801. The sources of process state information may vary such as, OPC tags, historian data, specific PLC block information, or network traffic. This information may be used to gain more information about the process itself or used as a trigger for malicious actions.”]
Source: https://collaborate.mitre.org/attackics/index.php/Technique/T0801