​​Investigating Industrial Control Systems using Microsoft’s ICSpector open-source framework

ICSpector is an open source forensic framework developed by Microsoft's OT Security team. The team activities are part of Microsoft's Defender for IoT security platform (see product and commercial information here).

1. ICSpector is licensed under an opensource license and is free to use. Our goal is to create a global community of researchers and OT security experts who can contribute to the framework and expand its protocol coverage.
2. Using the tool on a PC in the same network, the customer can collect and examine data directly from a PLC that is connected to the network. A variety of devices can be used to run the application.

Data is extracted directly locally and isn't transmitted anywhere. It's up to you how you want to forward the data.

We invite you to join our community and stay in touch, and I'd love to talk further with you about the tool and your application. Please contact me directly if you are interested.