ICS Packet Analysis Workshop

DESCRIPTION:
The course has two sections.  The first section explains control system functions to IT/IS people.  This includes PLC design and operation and why things are they way they are today in ICS network environments.  It also includes basic information on how to identify ABB, Honeywell, Emerson, Telvent, Siemens, Rockwell and BACNet network connections.  It also explains in great detail, the Modbus and DNP3 protocols and how to manually decode them.  The second section has three labs which take the student through decoding the Modbus protocol, detailed Wireshark analysis techniques and then running an automated NSM tool.

Continue reading “ICS Packet Analysis Workshop”