© 2026 Hashnode
(Follow-up to: “Observing Baseline vs Anomalous Modbus Traffic – A Beginner’s ICS/OT Security Lab”) Introduction In my previous lab, I focused on a foundational skill in ICS/OT security operations: establishing a baseline and identifying anomalous pr...

Introduction In support of my recent research into ICS/OT Security Operations, I wanted to set up a small, controlled environment where I could observe normal industrial network behavior identify meaningful deviations reason about that activity us...

This technical post focuses on the experience layer of the CNC intelligence stack. After establishing correlation logic (Blog 15), predictive signals (Blog 17), and the performance intelligence layer (Blog 16), Blog 19 introduces the interface archit...

Blog 16 continues the engineering progression of my CNC data stack.After building the event correlation mechanism in Blog 15, this post focuses on the next abstraction layer: Performance Intelligence. While pipelines deliver events, and correlation p...
