02 / Notes from the research

Blogs.

Notes and research on OT/ICS security, industrial protocols, exploit behavior, detection engineering, and defensive validation.

An ongoing exploration

Inside OT Exploits: From Packet to Process

Protocol abuse, reconnaissance, denial of service, PLC logic, industrial web interfaces, and the defenses in between.

2 articles

A well-formed packet can still carry the wrong intent. Looking beyond protocol validity to understand industrial command abuse.

Good detection starts with a better question. Notes on baselines, evidence, and the distance between an alert and a safe control.

A journal in progress. These initial articles are labeled samples and can be replaced with original research.