logo
Red tradecraft
Operational procedures for OT attacks
  • Privacy greenhouse
  • Defence blues
  • Purple crossroads
  • Indigo observatory
  • Contact
Initializing search
    • An adversary mind map, one of many
    • The grounds
      • A canopy of apple-blossom
      • Where wild boars plough through endpoints
      • Wolverines do not ask for permissions
      • Riches in the ground
      • The device is just the keyring
      • Poking physics with network packets
        • Field notes from the process layer
        • Operational procedures for OT attacks
          • Runbook: OT reconnaissance
          • Runbook: IT to OT pivot
          • Runbook: Industrial protocol abuse
          • Runbook: Engineering workstation compromise
        • Operational procedures for OT attacks
          • Runbook: OT reconnaissance
          • Runbook: IT to OT pivot
          • Runbook: Industrial protocol abuse
          • Runbook: Engineering workstation compromise
        • IT-to-OT attack chain playbooks
      • The gate was already open
    • Ankh-Morpork: the city leaves a footprint
    • Fungolia earthworks
    • Unseen University Power & Light Co.
    • The Scarlet Semaphore
    • TryHackMe rooms
    • Root-Me challenges
    • RIPE NCC Academy labs

    Operational procedures for OT attacks¶

    Runbooks:

    • Runbook: OT reconnaissance
    • Runbook: IT to OT pivot
    • Runbook: Industrial protocol abuse
    • Runbook: Engineering workstation compromise
    2026-09-30 15:18
    Previous
    Low-and-slow: OT evasion and blending
    Next
    Runbook: OT reconnaissance
    © Copyright 2025, TyMyrddin.
    Created using Sphinx 7.2.6. and Sphinx-Immaterial · Made with love by Ty Myrddin, 2026, with a forest garden fostered by /ut7