© 2026 Hashnode
(Follow-up to: “Observing Baseline vs Anomalous Modbus Traffic – A Beginner’s ICS/OT Security Lab”) Introduction In my previous lab, I focused on a foundational skill in ICS/OT security operations: establishing a baseline and identifying anomalous pr...

Introduction In support of my recent research into ICS/OT Security Operations, I wanted to set up a small, controlled environment where I could observe normal industrial network behavior identify meaningful deviations reason about that activity us...

This technical post focuses on the experience layer of the CNC intelligence stack. After establishing correlation logic (Blog 15), predictive signals (Blog 17), and the performance intelligence layer (Blog 16), Blog 19 introduces the interface archit...
