Build normal traffic profiles for industrial control networks and identify unusual connections, polling intervals, and protocol operations. Use machine learning and process records to investigate deviations and produce anomaly reports with severity levels.
中文简介正在准备中。当前显示英语简介。
- Establishing normal traffic profiles for industrial networks
- Detecting unusual connections and polling intervals
- Investigating Nozomi Guardian or Dragos alerts
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
This skill covers deploying anomaly detection systems for industrial control environments using machine learning models trained on OT network baselines, physics-based process models, and behavioral analysis of industrial protocol communications. It addresses building normal behavior profiles for SCADA polling patterns, detecting deviations in Modbus/DNP3/OPC UA traffic, identifying rogue devices, and correlating network anomalies with physical process data from historians.
中文简介正在准备中。当前显示原文说明。
andycungkrinx91/konoha☆ 92026年10月19日 更新
This skill covers deploying anomaly detection systems for industrial control environments using machine learning models trained on OT network baselines, physics-based process models, and behavioral analysis of industrial protocol communications. It addresses building normal behavior profiles for SCADA polling patterns, detecting deviations in Modbus/DNP3/OPC UA traffic, identifying rogue devices, and correlating network anomalies with physical process data from historians.
中文简介正在准备中。当前显示原文说明。
micsapp/micstec-skills☆ 42026年3月20日 更新
This skill covers deploying anomaly detection systems for industrial control environments using machine learning models trained on OT network baselines, physics-based process models, and behavioral analysis of industrial protocol communications. It addresses building normal behavior profiles for SCADA polling patterns, detecting deviations in Modbus/DNP3/OPC UA traffic, identifying rogue devices, and correlating network anomalies with physical process data from historians.
中文简介正在准备中。当前显示原文说明。
aniket2348823/Vul-Agent☆ 22026年6月9日 更新
Design monitoring for industrial attacks that alter controller programs while hiding changes with false sensor readings. Compare PLC program blocks against known-good copies and check physical measurements against process models to identify suspicious inconsistencies.
中文简介正在准备中。当前显示英语简介。
- Monitoring industrial controller programs for unauthorized changes
- Investigating discrepancies between sensor readings and equipment behavior
- Planning detection across IT and industrial control systems
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Analyze Modbus industrial network traffic to identify unauthorized commands, write operations, and unusual polling intervals. Compare activity with normal traffic patterns and allowed operations, then report anomalies by type and severity.
中文简介正在准备中。当前显示英语简介。
- Investigating suspicious Modbus traffic
- Establishing normal polling patterns
- Defining allowed Modbus function codes
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Develop attack detection for SCADA systems that monitor and control industrial equipment. Compare network traffic and process measurements with normal behavior to identify unauthorized commands, altered sensor data, communication disruption, and indicators of known industrial malware.
中文简介正在准备中。当前显示英语简介。
- Introducing intrusion detection in a SCADA environment
- Investigating suspected attacks on industrial control systems
- Creating detection rules for industrial protocol abuse
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation from operators. It addresses PLC logic integrity monitoring, physics-based process anomaly detection, engineering workstation compromise indicators, USB-borne attack vectors, and multi-stage attack chain detection spanning IT-to-OT lateral movement through to process manipulation.
中文简介正在准备中。当前显示原文说明。
andycungkrinx91/konoha☆ 92026年10月19日 更新
This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems. It addresses function code monitoring, register range validation, timing analysis, unauthorized client detection, and deep packet inspection for malformed Modbus frames. The skill leverages Zeek with Modbus protocol analyzers, Suricata IDS with OT rules, and custom Python-based detection using Markov chain models for normal Modbus transaction sequences.
中文简介正在准备中。当前显示原文说明。
andycungkrinx91/konoha☆ 92026年10月19日 更新
This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command injection into PLCs, HMI compromise, historian data manipulation, and denial-of-service against control system communications. It leverages OT-specific intrusion detection systems, industrial protocol anomaly detection, and process data analytics to identify attacks that traditional IT security tools miss.
中文简介正在准备中。当前显示原文说明。
andycungkrinx91/konoha☆ 92026年10月19日 更新
This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation from operators. It addresses PLC logic integrity monitoring, physics-based process anomaly detection, engineering workstation compromise indicators, USB-borne attack vectors, and multi-stage attack chain detection spanning IT-to-OT lateral movement through to process manipulation.
中文简介正在准备中。当前显示原文说明。
micsapp/micstec-skills☆ 42026年3月20日 更新
This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems. It addresses function code monitoring, register range validation, timing analysis, unauthorized client detection, and deep packet inspection for malformed Modbus frames. The skill leverages Zeek with Modbus protocol analyzers, Suricata IDS with OT rules, and custom Python-based detection using Markov chain models for normal Modbus transaction sequences.
中文简介正在准备中。当前显示原文说明。
micsapp/micstec-skills☆ 42026年3月20日 更新
This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command injection into PLCs, HMI compromise, historian data manipulation, and denial-of-service against control system communications. It leverages OT-specific intrusion detection systems, industrial protocol anomaly detection, and process data analytics to identify attacks that traditional IT security tools miss.
中文简介正在准备中。当前显示原文说明。
micsapp/micstec-skills☆ 42026年3月20日 更新
This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation from operators. It addresses PLC logic integrity monitoring, physics-based process anomaly detection, engineering workstation compromise indicators, USB-borne attack vectors, and multi-stage attack chain detection spanning IT-to-OT lateral movement through to process manipulation.
中文简介正在准备中。当前显示原文说明。
aniket2348823/Vul-Agent☆ 22026年6月9日 更新
This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems. It addresses function code monitoring, register range validation, timing analysis, unauthorized client detection, and deep packet inspection for malformed Modbus frames. The skill leverages Zeek with Modbus protocol analyzers, Suricata IDS with OT rules, and custom Python-based detection using Markov chain models for normal Modbus transaction sequences.
中文简介正在准备中。当前显示原文说明。
aniket2348823/Vul-Agent☆ 22026年6月9日 更新
This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command injection into PLCs, HMI compromise, historian data manipulation, and denial-of-service against control system communications. It leverages OT-specific intrusion detection systems, industrial protocol anomaly detection, and process data analytics to identify attacks that traditional IT security tools miss.
中文简介正在准备中。当前显示原文说明。
aniket2348823/Vul-Agent☆ 22026年6月9日 更新