🔋 Energy Security theater

Defends energy security: cyber-physical threats to electric grids, pipelines, refineries, and generation, spanning OT/ICS intrusions, wiper attacks, and physical sabotage. It matters because energy is the keystone critical infrastructure whose disruption cascades into every other sector and is a prime nation-state coercion target.

🏹 Threat Actors

🦠 Malware & Tools

🛡 Exploited Vulnerabilities

🧭 Intelligence disciplines

📚 Priority sources & datasets

📜 Energy Security Playbook

1. Collect ICS/OT telemetry, exposed-device scans, and threat-actor infrastructure indicators for grid, pipeline, and generation assets
2. Enrich indicators against ICS malware signatures and map affected protocols (IEC-104, Modbus, OPC) and PLC/RTU vendor exposure
3. Analyze intrusion tradecraft against the ICS Cyber Kill Chain to gauge whether access enables disruption or destruction
4. Attribute activity to state-linked groups via toolmarks, C2 clustering, and CVE-exploitation patterns targeting energy operators
5. Alert utility operators and sector ISACs with detections, patch priorities, and OT segmentation guidance
6. Drive coordinated remediation, threat hunting, and, where warranted, sanctions or diplomatic escalation against the operator

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🎯 Add to case

🗃 Data Management

🧩 Advanced Capabilities

🔗 Cross-domain pivots