MITRE ATT&CK Evaluations for ICS: Detecting XENOTIME Activity

Dragos announces its participation in MITRE Engenuity's inaugural ICS ATT&CK Evaluations, which will emulate the XENOTIME activity group (responsible for the destructive TRISIS ICS malware) to test detection of ICS-specific adversary behaviors across an end-to-end attack chain. The report emphasizes the need for ICS-focused threat behavior analytics, environmental context in detection, and the value of platforms like the Dragos Platform for identifying and responding to sophisticated ICS threats.