Skill UI

This comprehensive guide details the deployment and configuration of Tofino industrial firewalls to secure critical SCADA and PLC systems. It utilizes Deep Packet Inspection (DPI) capabilities for core OT protocols (Modbus, EtherNet/IP, S7comm), ensuring strict access control and enforcing IEC 62443 zone boundaries. Ideal for segmenting control networks and providing compensating controls for unpatchable legacy equipment.

This guide details the design and implementation of security zones and conduits for Industrial Automation and Control Systems (IACS) following the stringent standards of IEC 62443-3-2. It enables risk-based network partitioning, assigning Security Level Targets (SL-T), and enforcing granular conduit controls. Use this when retrofitting flat OT networks or designing greenfield facilities to achieve IEC 62443 compliance, validating boundaries against the Purdue Reference Model.

This tool analyzes historical network traffic baselines to design secure and functional segmentation architectures for Operational Technology (OT) environments. It helps map flat Purdue-model networks into secure zones (VLANs) and automatically generates required firewall rules based on observed legitimate communication paths, adhering to standards like IEC 62443. Ideal for IT/OT convergence and risk mitigation.

A Python-powered engine implementing structured OT incident response procedures based on the SANS PICERL lifecycle. It classifies incident severity (safety, process, access, recon) and coordinates cross-functional teams (IT SOC, OT Engineering, Operations) to manage critical threats like ransomware in ICS/SCADA environments. Essential for establishing robust safety protocols and ensuring compliance with IEC 62443 and NERC CIP standards.

This tool implements robust network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model. It helps designers map and secure Industrial Control Systems (ICS) and SCADA networks into hierarchical security zones (Levels 0-5). It enforces strict data flow control and establishes the critical IT/OT DMZ (Level 3.5), adhering to IEC 62443 standards. Ideal for retrofitting or designing resilient industrial networks.

This script automates the process of conducting comprehensive ICS/OT asset discovery using the Claroty xDome API. It facilitates inventorying critical industrial assets (PLCs, RTUs, HMIs) across various Purdue Model levels. Ideal for brownfield environments, preparing for IEC 62443 compliance, and gaining visibility into undocumented operational technology networks.

A comprehensive assessment tool for the cybersecurity posture of oil and gas critical infrastructure. It covers upstream, midstream, and downstream facilities, evaluating SCADA, DCS, and SIS systems against industry standards like API 1164, IEC 62443, and TSA directives. Ideal for preparing for regulatory compliance audits and identifying security gaps in industrial control systems.

Conduct comprehensive security assessments for Operational Technology (OT) networks, including SCADA and DCS systems. This skill maps industrial protocols (Modbus, DNP3, OPC UA) and analyzes traffic against the Purdue Model. It is crucial for identifying IT/OT convergence risks, detecting misconfigurations, and ensuring compliance with standards like IEC 62443.

A comprehensive solution for performing Operational Technology (OT) vulnerability assessments using the Claroty xDome platform. It automatically discovers assets, correlates vulnerabilities using CVE and ICS-CERT advisories, and calculates risk scores. This method is designed for compliance requirements (e.g., IEC 62443, NERC CIP) and initial asset risk profiling, relying on passive monitoring and safe querying rather than active scanning or penetration testing.

This tool orchestrates safe vulnerability assessments for Operational Technology (OT) and Industrial Control Systems (ICS) environments. It prioritizes safety by guiding users through passive monitoring, native protocol querying, and carefully controlled active scanning methods, specifically designed to identify vulnerabilities without risk of disrupting industrial processes or crashing legacy controllers. Essential for compliance audits (e.g., IEC 62443).

A comprehensive tool designed for assessing the security posture of Programmable Logic Controller (PLC) firmware. It specializes in detecting critical vulnerabilities such as hardcoded credentials, undocumented debug interfaces, backdoor functions, and memory corruption flaws. The tool supports analyzing major industrial platforms (Siemens, Allen-Bradley) by performing static and dynamic analysis, and verifying firmware integrity against known-good baselines, adhering to standards like IEC 62443. Use only in authorized lab environments.

This guide details the design and configuration of secure, compliant remote access architectures for Operational Technology (OT) and Industrial Control Systems (ICS). It covers implementing jump server architectures, Multi-Factor Authentication (MFA), Privileged Access Management (PAM), session recording, and adhering to standards like IEC 62443 and NERC CIP-005. Ideal for network architects, security engineers, and operations teams needing to manage third-party vendor access securely.