ICS_repo

Collection of resources for Industrial Control System Cybersecurity

NIST guidelines for ICS cybersecurity

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1500-201.pdf

PCAP libraries for Industrial Control Systems:

• SCADA/ICS Network Captures 4SICS ICS Lab PCAP files - 360 MB of PCAP files from the ICS village at 4SICS https://www.netresec.com/?page=PCAP4SICS

• DigitalBond S4x15 ICS Village CTF PCAPs https://www.netresec.com/?page=DigitalBond_S4

• Compilation of ICS PCAP files indexed by protocol (by Jason Smith) https://github.com/automayt/ICS-pcap

• DEF CON 23 ICS Village https://media.defcon.org/DEF CON 23/DEF CON 23 villages/DEF CON 23 ics village/DEF CON 23 ICS Village packet captures.rar (requires RAR v5)

• TRITON execution of the TriStation protocol by Nozomi Networks https://github.com/NozomiNetworks/tricotools/blob/master/malware_exec.pcap

• TriStation traffic https://packettotal.com/app/analysis?id=0e55d9467f138d148c9635617bc8fd83

• Chinese ICS CTF with Modbus/TCP and Siemens S7comm traffic (CTF WP – 工控业务流量分析) http://www.icsmaster.org/archives/ics/741

• ICS Cybersecurity PCAP repository by Univ. of Coimbra CyberSec team https://github.com/tjcruz-dei/ICS_PCAPS

Two big pcap libraries general

• https://wiki.wireshark.org/SampleCaptures
• https://www.netresec.com/index.ashx?page=PcapFiles

Rapid7 Datasets

• https://opendata.rapid7.com/

Helpful links

• https://www.robertmlee.org/a-collection-of-resources-for-getting-started-in-icsscada-cybersecurity/

PCAP parser

• https://wiki.wireshark.org/Tools

SCADA HACKING TOOLS

https://scadahacker.com/library/

Active Defense Linux Distro

https://adhdproject.github.io/#!index.md