If you want to dig deeper into OT and ICS attacks,
you'll need to explore resources that go further than we can
cover in this course. ATT&CK for ICS is a knowledge base that's
useful for describing the actions an adversary may take while
operating within an ICS network.
It can be used to characterize and describe adversary behaviors in ICS networks.
The knowledge base exposes information in the form of the
matrix that provides a high‑level view of the tactics and
techniques described in the knowledge base.
It visually aligns individual techniques under the
tactics in which they can be applied.
For example,
under the tactic of gaining initial access, we see
things such as drive‑by compromise,
wireless attacks, and transient cyber assets, amongst other things.
And of course, some techniques span more than one tactic because
they can be used for different purposes.
The SANS Institute is a specialist cybersecurity
training and certification provider.
In addition to training and certification,
they offer a vast library of articles and white paper resources.
They cover in‑depth technical analyses,
case studies, and examples of how to deploy effective ICS cybersecurity.
Dragos is a leading provider of ICS cybersecurity services, but in addition to
that, they offer a broad range of resources to support the ICS cybersecurity
of community, from blogs and case studies, to infographics and podcasts, and
onto reports and white papers.
The pinnacle of its publication is its annual Year in Review report,
which provides an overview and analysis of ICS vulnerabilities, global threat
activity targeting industrial environments, and industry trends and
observations gathered from their engagements with customers.
And finally, we,
of course, have Pluralsight. The Pluralsight library is
vast, and you'll find a huge amount of content to support
your cybersecurity learning.
The security curriculum is growing rapidly with lots of new
and exciting developments in the pipeline,
so make sure to keep checking back for the latest new additions to the
library. Whilst this list is in no way exhaustive,
it's a good starting point, and these sites will provide you with
lots of opportunity to explore in greater depth the fascinating and
exciting field of OT and ICS cybersecurity.