SolarWinds Compromise: Impact on ICS/OT Networks and Remediation Strategies
Dragos: ICS Cybersecurity via YouTube
Overview
Syllabus
Intro
Agenda
Solar Winds
Solar Winds Compromise
What Happened
Two Types of Operations
What Does This Mean
Our Recommendations
What We Dont Know
Recommendations
Solar Winds Example
GE Example
Gain Visibility
DNS Query
Analyzing Compromised Environment
Digital Forensics Instant Response
Digital Forensics Virtual System
NERC Implications
Three Step Standards
Collection Management Framework
Questions
Collecting Forensic Evidence
Supernova
What to do
Taught by
Dragos: ICS Cybersecurity