Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems. Operating systems may contain commands to initiate a shutdown/reboot of a machine or network device. In some cases, these commands may also be used to initiate a shutdown/reboot of a remote computer or network device via [Network Device CLI](https://attack.mitre.org/techniques/T1059/008) (e.g. <code>reload</code>).(Citation: Microsoft Shutdown Oct 2017)(Citation: alert_TA18_106A)

Shutting down or rebooting systems may disrupt access to computer resources for legitimate users while also impeding incident response/recovery.

Adversaries may attempt to shutdown/reboot a system after impacting it in other ways, such as [Disk Structure Wipe](https://attack.mitre.org/techniques/T1561/002) or [Inhibit System Recovery](https://attack.mitre.org/techniques/T1490), to hasten the intended effects on system availability.(Citation: Talos Nyetya June 2017)(Citation: Talos Olympic Destroyer 2018)
System Shutdown/Reboot
source_name: mitre-attack  url: https://attack.mitre.org/techniques/T1529  external_id: T1529     source_name: Talos Nyetya June 2017  description: Chiu, A. (2016, June 27). New Ransomware Variant "Nyetya" Compromises Systems Worldwide. Retrieved March 26, 2019.  url: https://blog.talosintelligence.com/2017/06/worldwide-ransomware-variant.html     source_name: alert_TA18_106A  description: CISA. (2018, April 20). Russian State-Sponsored Cyber Actors Targeting Network Infrastructure Devices. Retrieved February 14, 2022.  url: https://www.cisa.gov/uscert/ncas/alerts/TA18-106A     source_name: Talos Olympic Destroyer 2018  description: Mercer, W. and Rascagneres, P. (2018, February 12). Olympic Destroyer Takes Aim At Winter Olympics. Retrieved March 14, 2019.  url: https://blog.talosintelligence.com/2018/02/olympic-destroyer.html     source_name: Microsoft Shutdown Oct 2017  description: Microsoft. (2017, October 15). Shutdown. Retrieved October 4, 2019.  url: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/shutdown     