minkione / caldera-ot

Caldera OT Plugin & Capabilities ICS Security Red Team

Caldera for OT Plugins

A collection of plugins that extend Caldera to the Operational Technology (OT) environment.

This repository contains all the Caldera for OT plugins as git submodules. As described in each individual plugin README, it is also possible to git clone a specific protocol plugin directly into the Caldera plugins directory, following the "Installation" guidance.

Install Caldera for OT Plugins

To install all the Caldera for OT plugins, use the recursive flag while cloning this repo:

git clone https://github.com/mitre/caldera-ot.git --recursive

Or, setup a specific plugin individually:

• bacnet
• dnp3
• modbus

What are the Caldera for OT plugins?

The Caldera for OT plugins unify and expose open-source OT protocol libraries in the form of protocol specific plugins:

• bacnet - for the Building Automation and Control Networks (BACnet) protocol
• dnp3 - for the Distributed Network Protocol 3 (DNP3)
• modbus - for the Modbus protocol

Each plugin contains the following documentation:

• High-level README.md
• Source code specific README.md (located under /src)
• Caldera Field Manual documentation (located under /docs)

What is the motivation for the plugins?

The Caldera for OT plugins enable adversary emulation in the OT environment, which supports traditional Caldera use cases. For example, training and testing of operators and defenses.

Also see our presentation on Emulating Adversary Actions in the Operational Environment with Caldera (TM) for OT.

Contact

Please reach out to [e-mail] with comments, questions, and to discuss collaboration opportunities.