Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment. (Citation: Enterprise ATT&CK) Services may not allow for modification of their data stores while running. Adversaries may stop services in order to conduct Data Destruction. (Citation: Enterprise ATT&CK)

Linked Issues

Issuelinks
Linktype Issue
is related to Techniques
is related to Application Server
is related to Intelligent Electronic Device (IED)
is related to Switch
is related to Human-Machine Interface (HMI)
is related to Firewall
is related to Remote Terminal Unit (RTU)
is related to Data Historian
is related to Virtual Private Network (VPN) Server
is related to Workstation
is related to Control Server
is related to Jump Host
is related to Safety Controller
is related to Data Gateway
is blocked by User Account Management
is blocked by Restrict Registry Permissions
is blocked by Restrict File and Directory Permissions
is blocked by Network Segmentation
is blocked by Detection of Service Stop
Impressum German English