The 2022 ATT&CK Evaluations for Managed Services Call for Participation is now open. Click here to learn how to participate.

Home  >  ICS TRITON  >  Operational Flow

TRITON Evaluation: Operational Flow

The Operational Flow separated technique execution into sequences we referred to as “Steps”, which are grouped in higher-level abstractions called “Phases”. Organizing our execution into Phases and Steps ensured that the detection displayed was correctly associated with the technique that was being tested. Each Step corresponded to an adversary’s intended goal during an operation.