iSID Analyst Knowledge Base

Arp Poisoning

Multiple changes of the MAC address for a specific IP were detected in a short period of time - this pattern is typical for ARP poisioning attack attempt

• Network Visibility

Device re-detected

The system detected traffic on an inactive asset

• Network Visibility

ABB, Start

An ABB operation was performed - Start action

• Asset Management

PCCC, Download request

A Download of the configuration was performed on the PLC

• Asset Management

UMAS, Stop the PLC

A UMAS operation was performed - Stop PLC action

• Asset Management