Nmap Scanning for ICS/OT (& IT) Networks - Part 1

Nmap scanning in industrial (ICS/OT) networks? Nmap is my favorite cyber security tool of all time! NOTE: Nmap should only be used to scan assets you have authorization to do so. It is up to your organization to determine what assets can be actively scanned. In Part 1, we cover the fundamentals of scanning ICS/OT & IT networks with Nmap, including: An Nmap Overview Using Packet Sniffers While Running Nmap Discovering Live Hosts (Ping sweeps, ARP scans, DNS lookups) Scanning for Open Ports Differences between TCP & UDP Determining Open, Closed & Filtered TCP Ports In Part 2, we will cover taking Nmap beyond basic port scanning with: Nmap service scans The Nmap Scripting Engine (NSE) Nmap ICS/OT protocol scripts Other Nmap script examples Slowing down or speeding up scans Saving scan results Zenmap, the Nmap GUI Thank you for checking out the videos! For more on ICS/OT cyber security, you can also find me at: mikeholcomb.com linkedin.com/in/mikeholcomb mike@mikeholcomb.com