Hey everyone 👋 Anand here — creator of Gridwolf. I built Gridwolf after repeatedly seeing the same challenge in real-world OT/ICS environments: active scanning is often not allowed, yet most tools depend on it. That leaves teams with limited visibility into what’s actually happening inside industrial networks. So the idea was simple — what if we could extract meaningful security insights purely from passive data? Gridwolf focuses on analyzing PCAP files to: - Understand ICS protocols like Modbus, S7, DNP3, BACnet, IEC 104 - Classify assets based on the Purdue Model - Detect behavioral anomalies like beaconing or suspicious communication - Map findings to MITRE ATT&CK for ICS - Generate assessment-style outputs instead of just dashboards The goal is to simulate a real OT security assessment workflow without touching production systems. This is still evolving, and I’m actively looking for feedback from: - OT/ICS security engineers - Red teamers / blue teamers - Anyone working in critical infrastructure Would really appreciate if you can try it out, break it, and share your thoughts 🙏 GitHub: https://github.com/valinorintell...

Gridwolf

Passive ICS/SCADA Network Discovery & Vuln Intelligence

Passive ICS/SCADA Network Discovery & Vuln Intelligence