Skill UI

This guide details the design and implementation of security zones and conduits for Industrial Automation and Control Systems (IACS) following the stringent standards of IEC 62443-3-2. It enables risk-based network partitioning, assigning Security Level Targets (SL-T), and enforcing granular conduit controls. Use this when retrofitting flat OT networks or designing greenfield facilities to achieve IEC 62443 compliance, validating boundaries against the Purdue Reference Model.

This tool analyzes historical network traffic baselines to design secure and functional segmentation architectures for Operational Technology (OT) environments. It helps map flat Purdue-model networks into secure zones (VLANs) and automatically generates required firewall rules based on observed legitimate communication paths, adhering to standards like IEC 62443. Ideal for IT/OT convergence and risk mitigation.

This tool implements robust network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model. It helps designers map and secure Industrial Control Systems (ICS) and SCADA networks into hierarchical security zones (Levels 0-5). It enforces strict data flow control and establishes the critical IT/OT DMZ (Level 3.5), adhering to IEC 62443 standards. Ideal for retrofitting or designing resilient industrial networks.

This script automates the process of conducting comprehensive ICS/OT asset discovery using the Claroty xDome API. It facilitates inventorying critical industrial assets (PLCs, RTUs, HMIs) across various Purdue Model levels. Ideal for brownfield environments, preparing for IEC 62443 compliance, and gaining visibility into undocumented operational technology networks.

Conduct comprehensive security assessments for Operational Technology (OT) networks, including SCADA and DCS systems. This skill maps industrial protocols (Modbus, DNP3, OPC UA) and analyzes traffic against the Purdue Model. It is crucial for identifying IT/OT convergence risks, detecting misconfigurations, and ensuring compliance with standards like IEC 62443.

This skill provides a comprehensive audit framework for securing process historian servers (e.g., OSIsoft PI, Honeywell PHD) within industrial Operational Technology (OT) environments. It guides users through assessing network exposure, implementing Purdue Model segmentation, and establishing secure data replication through a DMZ, ensuring process data integrity and preventing unauthorized access.

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.