Microsoft ICSpector (ICS Forensics Tools framework) is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files.
☆366Sep 11, 2025Updated 5 months ago
Alternatives and similar repositories for ics-forensics-tools
Users that are interested in ics-forensics-tools are comparing it to the libraries listed below
Sorting:
- Version 2 of the Graphical Realism Framework for Industrial Control Simulation (GRFICS)☆591Oct 29, 2025Updated 4 months ago
- ICS security resources☆127May 7, 2025Updated 9 months ago
- A Low-cost ICS Security Testbed for Education and Research☆119Mar 16, 2024Updated last year
- OT security monitoring #nsacyber☆615Jan 7, 2024Updated 2 years ago
- This is the ICSSIM source code and user manual for simulating industrial control system testbed for cybersecurity experiments☆92Jun 19, 2024Updated last year
- Lists of products useful for ICS security☆108Jun 24, 2024Updated last year
- A curated list of resources that I recommend when asked about how to learn about Industrial Control Systems Cyber Security.☆197May 10, 2023Updated 2 years ago
- A packet capture visualizer for industrial control networks.☆55Dec 4, 2023Updated 2 years ago
- MITRE Caldera™ for OT Plugins & Capabilities☆239Dec 22, 2025Updated 2 months ago
- The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support v…☆91Updated this week
- ☆75Apr 3, 2025Updated 10 months ago
- The primary objective of this project is to develop a cross-platform Python library capable of simulating the core fundamental functional…☆58Jan 19, 2026Updated last month
- Zeek OPCUA Binary Parser - CISA ICSNPP☆21Nov 19, 2025Updated 3 months ago
- OT Security Lab for ICS networks☆667Feb 18, 2026Updated last week
- Industrial Control Systems Network Protocol Parsers☆189Sep 4, 2025Updated 5 months ago
- Presentation Slides and Resources☆16Jun 12, 2024Updated last year
- A curated list of resources related to Industrial Control System (ICS) security.☆1,932Oct 10, 2025Updated 4 months ago
- Tools, tips, tricks, and more for exploring ICS Security.☆1,920Apr 15, 2025Updated 10 months ago
- ☆75Oct 2, 2025Updated 4 months ago
- Collection of writeups on ICS/SCADA security.☆197Oct 19, 2025Updated 4 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆127Apr 6, 2024Updated last year
- Industrial Security Scripts☆144Feb 19, 2026Updated last week
- Zeek network security monitor plugin that enables parsing of the S7 protocol☆41May 30, 2024Updated last year
- A proof of concept implementation of the Siemens S7 protocol analyser for the Bro IDS.☆16Mar 26, 2017Updated 8 years ago
- AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE…☆1,205Dec 29, 2025Updated 2 months ago
- Zeek Profinet I/O Context Manager Parser - CISA ICSNPP☆13Nov 19, 2025Updated 3 months ago
- Documentation and guidance to practice secure coding for various PLC vendors☆41Oct 27, 2023Updated 2 years ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆2,344Feb 19, 2026Updated last week
- Graphical Realism Framework for Industrial Control Simulations☆225Jun 20, 2024Updated last year
- Beer-ISAC Community Resources☆26Jan 22, 2021Updated 5 years ago
- We want to create a Python PLC honeypot which support multiple primary OT communication protocols such as Modbus-TCP and Siemens-S7Comm. …☆58Apr 30, 2025Updated 10 months ago
- A list of RMMs designed to be used in automation to build alerts☆117Nov 9, 2025Updated 3 months ago
- A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …☆431Feb 18, 2026Updated last week
- Operational Technology (OT) Simulator☆54Oct 6, 2025Updated 4 months ago
- BusPwn V1.0 is a powerful Modbus hacking framework designed for testing and exploiting vulnerabilities in Modbus-based systems commonly f…☆26Apr 19, 2025Updated 10 months ago
- Wireshark dissector for wirelessHART☆13Aug 2, 2017Updated 8 years ago
- ☆17Mar 8, 2024Updated last year
- A risk rating calculation methodology that uses the OWASP Risk Rating Methodology as a basis.☆32Sep 4, 2024Updated last year
- A collection of reports and case studies to understand the threat landscape for UK critical infrastructure☆38Jan 23, 2024Updated 2 years ago