Notes

Writeups, with the working shown.

Each one explains a piece of the work in plain terms, from what was observed through to the step a reader can take.

1. 2026-09Attacking and defending an EtherNet/IP water controllerThree attack classes against a water controller, each mapped to ATT&CK for ICS and IEC 62443 and paired with a detection a defender can run.Read →
2. BMS security in plain EnglishWhat a building management system runs and how to keep it secure, written for the people who run one.Read →