Identify & Defend Against Rare INCONTROLLER Industrial Controls Attack Tools

Presented by

Rob Caldwell, Director Consulting, ICS; Daniel Kapellmann Zafra, Senior Manager, Analysis

About this talk

In conjunction with the Mandiant report published on April 13th, our experts share the detailed findings from research conducted on INCONTROLLER. This set of attack tools were built to target machine automation devices and allow attackers to shut down, reprogram, or disable industrial control systems. This briefing will cover: • An overview of the INCONTROLLER attack tools, their capabilities against a variety of different ICS devices using industrial network protocols • Our assessment of the threat these tools present, the targeting and TTPs to watch for from notable threat clusters • Mandiant findings and recommendations, including a range of mitigations, discovery methods, and hunting tools to help organizations identify and defend against INCONTROLLER
Related topics:

More from this channel

Upcoming talks (3)
On-demand talks (371)
Subscribers (122552)
Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.