Free 25-Hour Course on OT/ICS Cybersecurity by Mike Holcomb

Listen to this Post

Featured Image
Over 60,000 people have watched this free 25-hour YouTube course on OT/ICS Cybersecurity, and it has received outstanding feedback from students. The course covers essential topics for securing Industrial Control Systems (ICS) and Operational Technology (OT) environments.

🔗 Course Link: youtube.com/@utilsec

Course Sections:

1. to Getting Started in ICS/OT Cyber Security

2. ICS/OT Cyber Security Overview

3. Control Systems & Protocols

4. Secure Network Architecture

5. Asset Registers & Control Systems Inventory

6. Threat & Vulnerability Management

7. OSINT for Industrial Controls

8. Incident Detection & Response

9. Industry Standards & Regulations

10. to ICS/OT Penetration Testing

11. Review Questions (100+ questions to test knowledge)

You Should Know: Essential OT/ICS Cybersecurity Commands & Tools

1. Network Scanning & Discovery (OT Environments)

 Nmap for ICS device discovery (non-intrusive) 
nmap -sS -Pn -T4 --script=banner -p 502,102,443,80 <OT_IP_Range>

Shodan CLI for ICS device search 
shodan search --fields ip_str,port,org,hostnames product:modbus 

2. Modbus Protocol Interaction

 Using mbpoll for Modbus queries 
mbpoll -a 1 -b 9600 -P none -t 3 -r 1 -c 5 /dev/ttyUSB0

Metasploit Modbus scanner 
use auxiliary/scanner/scada/modbusdetect 
set RHOSTS <Target_IP> 
run 

3. ICS Firewall & Traffic Analysis

 Zeek (Bro) for ICS traffic logging 
zeek -i eth0 -C ICS.conf

Suricata IDS rules for SCADA protocols 
suricata -c /etc/suricata/suricata.yaml -i eth0 

4. PLC Exploitation & Security Testing

 PLCScan for Siemens S7 devices 
python plcscan.py -d <Target_IP>

ISF (Industrial Exploitation Framework) 
use exploit/windows/scada/ge_proficy_cimplicity 
set RHOST <Target_IP> 
exploit 

5. OT Vulnerability Assessment

 OpenVAS for ICS vulnerability scanning 
openvas-setup 
openvas-start

Using Nmap NSE scripts for SCADA vulns 
nmap --script=scada,modbus <Target_IP> 

6. ICS Incident Response & Forensics

 GRR Rapid Response for OT environments 
grr_console --config=grr-server.yaml

Log analysis for ICS attacks 
grep -i "unauthorized access" /var/log/syslog 

What Undercode Say

This free 25-hour OT/ICS Cybersecurity course is a must-watch for professionals entering industrial security. The hands-on Modbus, Nmap, Shodan, and Metasploit techniques provided here help in securing critical infrastructure. Always test in a lab environment before applying in production.

🔗 Enhance your skills:

Expected Output:

A detailed, actionable guide on OT/ICS cybersecurity, including free course access, penetration testing commands, and defensive techniques for securing industrial systems.

 Example Command Output 
$ nmap -sS -Pn -T4 --script=modbus-discover.nse <Target_IP> 
PORT STATE SERVICE 
502/tcp open modbus 
| modbus-discover: 
| Device ID: Siemens S7-300 
| Vendor: Siemens AG 

Next Steps:

✅ Watch the full course here.
✅ Practice in a virtual lab (e.g., ICS-Security-Lab).

✅ Join OT security forums for advanced discussions.

End of

References:

Reported By: Ouardi Mohamed – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

Join Our Cyber World:

💬 Whatsapp | 💬 Telegram