Monitors for abnormal increases in crosslink communication traffic, which may suggest unauthorized data transfers between spacecraft or accessing being attempted via crosslink.
ID | Name | Description | |
IA-0003 | Crosslink via Compromised Neighbor | Threat actors may compromise a victim SV via the crosslink communications of a neighboring SV that has been compromised. SVs in close proximity are able to send commands back and forth. Threat actors may be able to leverage this access to compromise other SVs once they have access to another that is nearby. | |
LM-0003 | Constellation Hopping via Crosslink | Threat actors may attempt to command another neighboring spacecraft via crosslink. SVs in close proximity are often able to send commands back and forth. Threat actors may be able to leverage this access to compromise another SV. |