T1565Impact

Data Manipulation

Modify stored / in-transit data to influence outcomes — false records, altered transactions, falsified telemetry.

§ Where this technique fits

T1565 is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 5 on average.

Authoritative reference: attack.mitre.org/techniques/T1565/.

§ Dossiers chaining this technique

MITM HL7 v2 → tamper lab orders / results
HL7 v2 over MLLP is plaintext pipe-delimited. From the same VLAN as the lab analyser ↔ EHR link, MITM and rewrite OBX result segments — changes the patient's documented test result.
step 5 / 5

§ Where this technique fits

§ Dossiers chaining this technique

MITM HL7 v2 → tamper lab orders / results