+Data Historian

Data Historian

Data historians, or historian, are systems used to collect and store data, including telemetry, events, alerts, and alarms about the operational process and supporting devices. The historian typically utilizes a database to store this data, and commonly provide tools and interfaces to support the analysis of the data. Data historians are often used to support various engineering or business analysis functions and therefore commonly needs access from the corporate network. Data historians often work in a hierarchical paradigm where lower/site level historians collect and store data which is then aggregated into a site/plant level historian. Therefore, data historians often have remote services that can be accessed externally from the ICS network. Many data historian vendors have designed their software to securely transfer data between the ICS and business networks instead of requiring business systems to access the data historian in the ICS network directly.

1. Overview

Summary Standard

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements
Source Requirement

3. Related Regulations

Regulations
Source Regulation

Linked Issues

Issuelinks
Linktype Issue
is related to Assets
is related to Supply Chain Compromise
is related to Indicator Removal on Host
is related to Data from Information Repositories
is related to Graphical User Interface
is related to Commonly Used Port
is related to Remote System Discovery
is related to Change Credential
is related to Adversary-in-the-Middle
is related to Network Sniffing
is related to Hooking
is related to Denial of Service
is related to Scripting
is related to Device Restart/Shutdown
is related to Service Stop
is related to Monitor Process State
is related to Data from Local System
is related to Exploitation for Evasion
is related to Replication Through Removable Media
is related to Broadcast Discovery
is related to Multicast Discovery
is related to Exploitation of Remote Services
is related to Masquerading
is related to Autorun Image
is related to Default Credentials
is related to Ethernet
is related to Alarm Suppression
is related to Network Connection Enumeration
is related to Standard Application Layer Protocol
is related to Connection Proxy
is related to Rogue Master
is related to Block Communications
is related to Valid Accounts
is related to Command-Line Interface
is related to Rootkit
is related to System Binary Proxy Execution
is related to Remote Services
is related to Wi-Fi
is related to Insecure Credentials
is related to Port Scan
is related to Native API
is related to External Remote Services
is related to Exploitation for Privilege Escalation
is related to Point & Tag Identification
is related to Data Destruction
is related to Remote System Information Discovery
is related to Automated Collection
  • MITREATTACK -

    © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. https://attack.mitre.org/

    Terms of Use

    LICENSE

    The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

    "© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation."

    DISCLAIMERS

    MITRE does not claim ATT&CK enumerates all possibilities for the types of actions and behaviors documented as part of its adversary model and framework of techniques. Using the information contained within ATT&CK to address or cover full categories of techniques will not guarantee full defensive coverage as there may be undisclosed techniques or variations on existing techniques not documented by ATT&CK.

    ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN ARE PROVIDED ON AN "AS IS" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

    See our FAQ for more information on how to use and represent the ATT&CK name.

Impressum German English