No EDR, No logs, No problems... How Suricata can save detection in OT world?
Legacy Operating Systems, Real Time Operating Systems, black box devices using special protocols, no EDR available, system logs that are difficult to collect... Monitoring the security of OT devices can prove challenging for most security tools on the market. Find out how Suricata helped me to detect malicious activity, particularly on medical devices.
Charles BLANC-ROLIN
Swiss knife in cybersecurity, Suricata enthusiast, I finally joined a CERT Team as Lead SOC analyst a year ago, after 17 years in french healthcare sector.
I’m sharing my discoveries through detection rules with PawPatrules ruleset.