Sub-GHz ISM / Remotes

The Sub-GHz ISM / Remotes procedures — the descent for this technology step by step, each with its method, field case, known attacks and remediation.

colour = layer of the descent (IG → AP)·id = RFSAM-<PROTOCOL>-<LAYER>-NN·status VERIFIED real field case REVIEWED cited, illustrative field case DRAFT in progress
RFSAM-SUBG-SP-01Sweep the ISM bands and discover sub-GHz burstsVERIFIEDRFSAM-SUBG-PHY-01Demodulate and frame a Sub-GHz burstREVIEWEDRFSAM-SUBG-LL-01Recover frame structure and addressingVERIFIEDRFSAM-SUBG-CR-01Assess rolling-code interception, replay and key recoveryREVIEWEDRFSAM-SUBG-AT-01Replay and forge a sub-GHz burstVERIFIED