Detection of Siemens Project File Format Infection

ID: DET0906
Domains: ICS
Analytics: AN2049
Version: 1.0
Created: 22 April 2026
Last Modified: 24 April 2026

Analytics

AN2049

Monitor for unexpected changes to project files, although if the malicious modification occurs in tandem with legitimate changes it will be difficult to isolate the unintended changes by analyzing only file systems modifications.

Log Sources
Data Component Name Channel
File Modification (DC0061) File None