Your cart is empty.
Keep shopping
ICS/OT Offensive Security: Red Team Methodology
362 students
ICS/OT Offensive Security: Red Team Methodology
Master ICS/OT red teaming, MITRE ATT&CK for ICS, protocol exploitation & red team reporting for critical infrastructure
Created byAdrian Găitan, Evaluris Solutions, Reju Kole
Last updated 3/2026
English
What you'll learn
- Apply a structured red team methodology to ICS/OT environments from reconnaissance through impact
- Map adversary tactics to MITRE ATT&CK for ICS and plan engagements using real threat actor TTPs
- Identify and exploit attack surface across PLCs, RTUs, HMIs, historians and OT network architecture
- Execute initial access techniques including phishing, supply chain abuse and remote access exploitation
- Perform lateral movement from IT networks into OT environments across Purdue model levels
- Exploit industrial protocols including Modbus, DNP3, S7Comm and EtherNet/IP offensively
- Analyze real-world ICS attacks including Stuxnet, Industroyer, Triton and Oldsmar as red team lessons
- Produce professional OT red team reports communicating physical risk to technical and executive audiences
Explore related topics
Course content
11 sections • 31 lectures • 13h 41m total length
Requirements
- Basic understanding of networking concepts (TCP/IP, VLANs, firewalls) is required
- Familiarity with penetration testing fundamentals is recommended but not mandatory
- No prior ICS/OT experience needed — all industrial concepts are taught from the ground up
Description
Industrial control systems are among the most critical and most vulnerable targets in the world, especially in 2026 — yet offensive security training for ICS/OT environments remains rare, expensive, and largely inaccessible.
This course changes that.
ICS/OT Offensive Security: Red Team Methodology is a structured, practitioner-focused course that teaches you how to think, plan, and operate as a red teamer inside industrial environments. You will learn how attackers approach ICS/OT targets from initial reconnaissance all the way through to physical impact — and how to conduct engagements safely, professionally, and with the depth that critical infrastructure demands.
You will build a complete understanding of OT architecture, industrial protocols, and adversary tradecraft before moving into offensive techniques covering initial access, IT-to-OT pivoting, lateral movement across Purdue model levels, protocol exploitation, and device attacks against PLCs, RTUs, and HMIs.
Every major phase is grounded in real-world adversary behavior mapped to MITRE ATT&CK for ICS, and reinforced through four in-depth case studies covering Stuxnet, Industroyer, Triton, and the Oldsmar water treatment attack.
The course closes with a full red team reporting framework designed specifically for OT engagements, including how to communicate physical risk to both technical teams and executive stakeholders.
Whether you are a penetration tester expanding into ICS, an IT security professional transitioning into OT, or a consultant supporting critical infrastructure clients — this course gives you the methodology, the knowledge, and the professional foundation to operate in one of the most demanding and highest-impact specializations in cybersecurity.
Who this course is for:
- Penetration testers and ethical hackers who want to specialize in ICS/OT offensive security
- IT security professionals transitioning into operational technology and industrial cybersecurity roles
- Security consultants, red teamers and engineers supporting critical infrastructure protection programs