Security Onion for ICS and OT network monitoring
Passive monitoring of industrial networks with Security Onion: Zeek analyzers for Modbus, DNP3, BACnet, OPC UA, S7 and other ICS protocols, sensor placement on OT segments, and air-gapped installs and updates.

