Microsoft ICSpector: A leap forward in industrial PLC metadata analysis
Tagsindustry
Full article74 words · extracted from helpnetsecurity.com · click to collapse
Microsoft ICSpector is an open-source forensics framework that enables the analysis of industrial PLC metadata and project files.
Architecture
The framework provides investigators with a convenient way to scan for PLCs and identify any suspicious artifacts within ICS environments, which can be used for manual checking, automated monitoring tasks, or incident response operations to detect compromised devices.
ICSpector allows investigators to review and customize the output to their requirements. It’s available on GitHub.
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.helpnetsecurity.com/2023/12/14/microsoft-icspector-industrial-plc-metadata-analysis/