Skill UI

This tool implements network segmentation based on the Purdue Enterprise Reference Architecture (PERA). It helps secure Industrial Control Systems (ICS) by mapping assets and data flows to specific Purdue levels (0-5), defining necessary firewall rules, and establishing DMZs. It ensures strict traffic control between IT and OT domains, adhering to standards like IEC 62443 and facilitating secure network retrofitting.

This playbook guides Security Operations Center (SOC) analysts through a comprehensive, multi-step process for triaging and prioritizing security incidents. It covers receiving alerts from SIEM/EDR, enriching data using threat intelligence feeds (VirusTotal, AbuseIPDB), classifying the incident type (MITRE ATT&CK mapping), and calculating a severity score based on asset criticality and data sensitivity. The workflow culminates in automating ticket creation and triggering immediate response procedures via tools like PagerDuty.