Discovery

Attackers identifying and mapping out the ECU within a vehicle's network. Understanding the interconnected ECU can provide insights into potential vulnerabilities and attack vectors.

Attackers probe specific ECU to determine services they offer and their functionalities. By understanding these services, attackers can pinpoint which ECU operations to exploit or manipulate for subsequent attacks.

Attackers attempt to obtain a list of services running on remote hosts and local network infrastructure devices. Ports, vulnerabilities, cloud services are scanned. The goal is to find these that allow code to be executed remotely.