ICS/OT COLLECTION

INDUSTRIAL AND OPERATIONAL VISIBILITY

Lack of visibility can create security blind spots in any environment—be it a factory floor or an enterprise IT network. Corelight offers a visibility solution for identifying and monitoring the most common Industrial Control System (ICS) and Operational Technology (OT) protocols, equipping security teams to defend against threats across diverse environments.

Use the ICS/OT Collection to identify devices and capture evidence related to ICS/OT protocols, yielding greater visibility and faster incident response times. Monitor uncommon network behavior, such as an HVAC system interacting with a server. React more quickly to risks by identifying anomalies in enterprise and operational network traffic in real-time.

Corelight Collections are data extension and detection sets included with your Corelight subscription and can be activated depending on your needs.

• Identify and log ICS/OT protocols like BACnet, DNP3, Ethercat, Modbus, and more.
• Discover activity related to HVAC, security cameras, smart lighting, and access control systems
• Based on contributions from the Cybersecurity and Infrastructure Security Agency (CISA)
• See also: Entity Collection