Securing the Air-Gap: Building a Hardware-Aware Forensic Suite for ICS/OT by Rugero Tesla (404saint)

The Problem In industrial environments, the "Air-Gap" is a myth as long as USB drives exist. Removable media remains the primary bridge for malicious logic (Stuxnet, etc.). Standard AV often misses the subtle indicators of industrial protocol manipulation or high-entropy obfuscation hidden in legitimate vendor installers. Introducing Guardian-OT I built Guardian-OT to provide a minimalist, high-signal audit of any drive before it touches a critical engineering workstation. It’s a p...