OT Monitoring for Industrial Networks and Critical Infrastructure<\/h2><\/div><\/div><\/div>![](\"https:\/\/www.otconnect.nl\/wp-content\/uploads\/2026\/06\/Malcolm_outline_banner_dark.png\" "\\"Malcolm_outline_banner_dark\\"")
<\/span><\/div><\/div><\/div><\/div><\/div>“Zicht op uw OT-netwerk en grip op cyberrisico’s met open-source oplossingen”<\/h4><\/div>![](\"https:\/\/www.otconnect.nl\/wp-content\/uploads\/2025\/08\/E3C87296-3FBD-4B39-ABF3-ADE0D2FE914B.jpeg\" "\\"E3C87296-3FBD-4B39-ABF3-ADE0D2FE914B\\"")
<\/span><\/div><\/div><\/div>More and more organizations are facing increasing cyber threats, stricter laws and regulations such as NIS2, and a growing reliance on industrial automation. At the same time, many organizations have limited visibility into their OT networks, assets, and communication patterns. Without this visibility, it becomes difficult to detect anomalies, vulnerabilities, and cyber incidents in a timely manner and investigate them effectively.
To help organizations gain insight into their OT environment, OTconnect has developed the Malcolm OT Monitoring Introduction Training. This hands-on, one-day training course introduces participants to the world of OT network monitoring using Malcolm, a powerful open-source platform for OT visibility, network analysis, and security monitoring. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
Training and Practical Environment<\/h2><\/div>During the training, participants will learn how to visualize OT network traffic, how to automatically discover assets, and how to identify anomalous communication patterns. In addition, participants will be introduced to tools such as Malcolm Dashboards, Arkime, and NetBox, and will learn how to use them for OT monitoring and incident analysis.
The training is conducted in Dutch. The training materials are available in English and can also be provided in Dutch upon request.
The training can be taken at an OTconnect training location or as an in-company training session at your own organization. The training utilizes a realistic OT lab environment with simulated OT traffic and industrial protocols such as Modbus, OPC-UA, Siemens S7, and Ethernet\/IP. <\/p>\n<\/div><\/div><\/div><\/div><\/div>
<\/div>Doelgroep<\/h2><\/div>This accessible training course has been developed for organizations that manage, maintain, or secure OT networks and want to get started with OT monitoring and OT visibility.<\/p>\n<\/div>
<\/div>The training is suitable for<\/h4><\/div>\n- SOC analysts<\/li>\n
- OT operators<\/li>\n
- OT Engineers<\/li>\n
- Maintenance Engineers<\/li>\n
- OT Consultants<\/li>\n
- Security professionals<\/li>\n
- IT administrators<\/li>\n
- Industrial Network Administrators<\/li>\n
- Organizations Preparing for NIS2<\/li>\n<\/ul>\n<\/div><\/div><\/div>
![](\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%272560%27%20height%3D%271709%27%20viewBox%3D%270%200%202560%201709%27%3E%3Crect%20width%3D%272560%27%20height%3D%271709%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\")
<\/div><\/div><\/div><\/div>No specific prior knowledge of Malcolm is required. A basic understanding of networks and industrial automation is a plus.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
Practical Component<\/h2><\/div>![](\"https:\/\/www.otconnect.nl\/wp-content\/uploads\/2026\/06\/malcolm-dashboard.webp\" "\\"malcolm-dashboard\\"")
<\/span><\/div><\/div><\/div>The training combines theory with hands-on exercises. Approximately 40% of the training consists of theory and 60% of practical exercises. Participants work in an OTconnect lab environment where they perform their own analyses on realistic OT datasets and industrial protocols. <\/p>\n
During the labs, topics such as asset discovery, Modbus analysis, PLC scanning, shadow assets, and incident analysis are covered. This provides immediate insight into how Malcolm can be used in practice for OT monitoring and OT security. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>Training Program<\/h2><\/div><\/i><\/span><\/div>Introduction to OT Monitoring<\/h2><\/div><\/div>\n\n- OT vs. IT<\/li>\n
- Why OT Monitoring Is Important<\/li>\n
- Current Threats in OT Environments<\/li>\n
- OT Visibility as the Foundation for Cyber Resilience<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Sensor Placement<\/h2><\/div><\/div>\n\n- Sensor Placement Within OT Networks<\/li>\n
- Purdue Model<\/li>\n
- TAP vs. SPAN<\/li>\n
- Monitoring of Critical Network Segments<\/li>\n
- Common Design Choices<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Malcolm Dashboards<\/h2><\/div><\/div>\n\n- Introduction to Malcolm<\/li>\n
- Using Dashboards<\/li>\n
- Insight into Assets and Communication<\/li>\n
- Interpreting Security Alerts<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/i><\/span><\/div>
NetBox & Asset Context<\/h2><\/div><\/div>\n\n- Asset Discovery<\/li>\n
- Asset Visibility<\/li>\n
- Enrichment of OT Network Data<\/li>\n
- Detecting Unknown Assets<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Arkime<\/h2><\/div><\/div>\n\n- Historical Network Analysis<\/li>\n
- Explore Sessions<\/li>\n
- Searching for Unusual Communication<\/li>\n
- Support for Incident Investigations<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Incident Analysis<\/h2><\/div><\/div>\n
<\/span><\/div><\/div><\/div><\/div><\/div>“Zicht op uw OT-netwerk en grip op cyberrisico’s met open-source oplossingen”<\/h4><\/div><\/span><\/div><\/div><\/div>More and more organizations are facing increasing cyber threats, stricter laws and regulations such as NIS2, and a growing reliance on industrial automation. At the same time, many organizations have limited visibility into their OT networks, assets, and communication patterns. Without this visibility, it becomes difficult to detect anomalies, vulnerabilities, and cyber incidents in a timely manner and investigate them effectively.
To help organizations gain insight into their OT environment, OTconnect has developed the Malcolm OT Monitoring Introduction Training. This hands-on, one-day training course introduces participants to the world of OT network monitoring using Malcolm, a powerful open-source platform for OT visibility, network analysis, and security monitoring. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
Training and Practical Environment<\/h2><\/div>During the training, participants will learn how to visualize OT network traffic, how to automatically discover assets, and how to identify anomalous communication patterns. In addition, participants will be introduced to tools such as Malcolm Dashboards, Arkime, and NetBox, and will learn how to use them for OT monitoring and incident analysis.
The training is conducted in Dutch. The training materials are available in English and can also be provided in Dutch upon request.
The training can be taken at an OTconnect training location or as an in-company training session at your own organization. The training utilizes a realistic OT lab environment with simulated OT traffic and industrial protocols such as Modbus, OPC-UA, Siemens S7, and Ethernet\/IP. <\/p>\n<\/div><\/div><\/div><\/div><\/div>
<\/div>Doelgroep<\/h2><\/div>This accessible training course has been developed for organizations that manage, maintain, or secure OT networks and want to get started with OT monitoring and OT visibility.<\/p>\n<\/div>
<\/div>The training is suitable for<\/h4><\/div>\n- SOC analysts<\/li>\n
- OT operators<\/li>\n
- OT Engineers<\/li>\n
- Maintenance Engineers<\/li>\n
- OT Consultants<\/li>\n
- Security professionals<\/li>\n
- IT administrators<\/li>\n
- Industrial Network Administrators<\/li>\n
- Organizations Preparing for NIS2<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div>
No specific prior knowledge of Malcolm is required. A basic understanding of networks and industrial automation is a plus.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
Practical Component<\/h2><\/div><\/span><\/div><\/div><\/div>The training combines theory with hands-on exercises. Approximately 40% of the training consists of theory and 60% of practical exercises. Participants work in an OTconnect lab environment where they perform their own analyses on realistic OT datasets and industrial protocols. <\/p>\n
During the labs, topics such as asset discovery, Modbus analysis, PLC scanning, shadow assets, and incident analysis are covered. This provides immediate insight into how Malcolm can be used in practice for OT monitoring and OT security. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>Training Program<\/h2><\/div><\/i><\/span><\/div>Introduction to OT Monitoring<\/h2><\/div><\/div>\n\n- OT vs. IT<\/li>\n
- Why OT Monitoring Is Important<\/li>\n
- Current Threats in OT Environments<\/li>\n
- OT Visibility as the Foundation for Cyber Resilience<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Sensor Placement<\/h2><\/div><\/div>\n\n- Sensor Placement Within OT Networks<\/li>\n
- Purdue Model<\/li>\n
- TAP vs. SPAN<\/li>\n
- Monitoring of Critical Network Segments<\/li>\n
- Common Design Choices<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Malcolm Dashboards<\/h2><\/div><\/div>\n\n- Introduction to Malcolm<\/li>\n
- Using Dashboards<\/li>\n
- Insight into Assets and Communication<\/li>\n
- Interpreting Security Alerts<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/i><\/span><\/div>
NetBox & Asset Context<\/h2><\/div><\/div>\n\n- Asset Discovery<\/li>\n
- Asset Visibility<\/li>\n
- Enrichment of OT Network Data<\/li>\n
- Detecting Unknown Assets<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Arkime<\/h2><\/div><\/div>\n\n- Historical Network Analysis<\/li>\n
- Explore Sessions<\/li>\n
- Searching for Unusual Communication<\/li>\n
- Support for Incident Investigations<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Incident Analysis<\/h2><\/div><\/div>\n
<\/span><\/div><\/div><\/div>More and more organizations are facing increasing cyber threats, stricter laws and regulations such as NIS2, and a growing reliance on industrial automation. At the same time, many organizations have limited visibility into their OT networks, assets, and communication patterns. Without this visibility, it becomes difficult to detect anomalies, vulnerabilities, and cyber incidents in a timely manner and investigate them effectively.
To help organizations gain insight into their OT environment, OTconnect has developed the Malcolm OT Monitoring Introduction Training. This hands-on, one-day training course introduces participants to the world of OT network monitoring using Malcolm, a powerful open-source platform for OT visibility, network analysis, and security monitoring. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
Training and Practical Environment<\/h2><\/div>During the training, participants will learn how to visualize OT network traffic, how to automatically discover assets, and how to identify anomalous communication patterns. In addition, participants will be introduced to tools such as Malcolm Dashboards, Arkime, and NetBox, and will learn how to use them for OT monitoring and incident analysis.
The training is conducted in Dutch. The training materials are available in English and can also be provided in Dutch upon request.
The training can be taken at an OTconnect training location or as an in-company training session at your own organization. The training utilizes a realistic OT lab environment with simulated OT traffic and industrial protocols such as Modbus, OPC-UA, Siemens S7, and Ethernet\/IP. <\/p>\n<\/div><\/div><\/div><\/div><\/div>
<\/div>Doelgroep<\/h2><\/div>This accessible training course has been developed for organizations that manage, maintain, or secure OT networks and want to get started with OT monitoring and OT visibility.<\/p>\n<\/div>
<\/div>The training is suitable for<\/h4><\/div>\n- SOC analysts<\/li>\n
- OT operators<\/li>\n
- OT Engineers<\/li>\n
- Maintenance Engineers<\/li>\n
- OT Consultants<\/li>\n
- Security professionals<\/li>\n
- IT administrators<\/li>\n
- Industrial Network Administrators<\/li>\n
- Organizations Preparing for NIS2<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div>
No specific prior knowledge of Malcolm is required. A basic understanding of networks and industrial automation is a plus.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
Practical Component<\/h2><\/div><\/span><\/div><\/div><\/div>The training combines theory with hands-on exercises. Approximately 40% of the training consists of theory and 60% of practical exercises. Participants work in an OTconnect lab environment where they perform their own analyses on realistic OT datasets and industrial protocols. <\/p>\n
During the labs, topics such as asset discovery, Modbus analysis, PLC scanning, shadow assets, and incident analysis are covered. This provides immediate insight into how Malcolm can be used in practice for OT monitoring and OT security. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>Training Program<\/h2><\/div><\/i><\/span><\/div>Introduction to OT Monitoring<\/h2><\/div><\/div>\n\n- OT vs. IT<\/li>\n
- Why OT Monitoring Is Important<\/li>\n
- Current Threats in OT Environments<\/li>\n
- OT Visibility as the Foundation for Cyber Resilience<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Sensor Placement<\/h2><\/div><\/div>\n\n- Sensor Placement Within OT Networks<\/li>\n
- Purdue Model<\/li>\n
- TAP vs. SPAN<\/li>\n
- Monitoring of Critical Network Segments<\/li>\n
- Common Design Choices<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Malcolm Dashboards<\/h2><\/div><\/div>\n\n- Introduction to Malcolm<\/li>\n
- Using Dashboards<\/li>\n
- Insight into Assets and Communication<\/li>\n
- Interpreting Security Alerts<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/i><\/span><\/div>
NetBox & Asset Context<\/h2><\/div><\/div>\n\n- Asset Discovery<\/li>\n
- Asset Visibility<\/li>\n
- Enrichment of OT Network Data<\/li>\n
- Detecting Unknown Assets<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Arkime<\/h2><\/div><\/div>\n\n- Historical Network Analysis<\/li>\n
- Explore Sessions<\/li>\n
- Searching for Unusual Communication<\/li>\n
- Support for Incident Investigations<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Incident Analysis<\/h2><\/div><\/div>\n
During the training, participants will learn how to visualize OT network traffic, how to automatically discover assets, and how to identify anomalous communication patterns. In addition, participants will be introduced to tools such as Malcolm Dashboards, Arkime, and NetBox, and will learn how to use them for OT monitoring and incident analysis.
The training is conducted in Dutch. The training materials are available in English and can also be provided in Dutch upon request.
The training can be taken at an OTconnect training location or as an in-company training session at your own organization. The training utilizes a realistic OT lab environment with simulated OT traffic and industrial protocols such as Modbus, OPC-UA, Siemens S7, and Ethernet\/IP. <\/p>\n<\/div><\/div><\/div><\/div><\/div>
Doelgroep<\/h2><\/div>This accessible training course has been developed for organizations that manage, maintain, or secure OT networks and want to get started with OT monitoring and OT visibility.<\/p>\n<\/div>
<\/div>The training is suitable for<\/h4><\/div>\n- SOC analysts<\/li>\n
- OT operators<\/li>\n
- OT Engineers<\/li>\n
- Maintenance Engineers<\/li>\n
- OT Consultants<\/li>\n
- Security professionals<\/li>\n
- IT administrators<\/li>\n
- Industrial Network Administrators<\/li>\n
- Organizations Preparing for NIS2<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div>
No specific prior knowledge of Malcolm is required. A basic understanding of networks and industrial automation is a plus.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
Practical Component<\/h2><\/div><\/span><\/div><\/div><\/div>The training combines theory with hands-on exercises. Approximately 40% of the training consists of theory and 60% of practical exercises. Participants work in an OTconnect lab environment where they perform their own analyses on realistic OT datasets and industrial protocols. <\/p>\n
During the labs, topics such as asset discovery, Modbus analysis, PLC scanning, shadow assets, and incident analysis are covered. This provides immediate insight into how Malcolm can be used in practice for OT monitoring and OT security. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>Training Program<\/h2><\/div><\/i><\/span><\/div>Introduction to OT Monitoring<\/h2><\/div><\/div>\n\n- OT vs. IT<\/li>\n
- Why OT Monitoring Is Important<\/li>\n
- Current Threats in OT Environments<\/li>\n
- OT Visibility as the Foundation for Cyber Resilience<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Sensor Placement<\/h2><\/div><\/div>\n\n- Sensor Placement Within OT Networks<\/li>\n
- Purdue Model<\/li>\n
- TAP vs. SPAN<\/li>\n
- Monitoring of Critical Network Segments<\/li>\n
- Common Design Choices<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Malcolm Dashboards<\/h2><\/div><\/div>\n\n- Introduction to Malcolm<\/li>\n
- Using Dashboards<\/li>\n
- Insight into Assets and Communication<\/li>\n
- Interpreting Security Alerts<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/i><\/span><\/div>
NetBox & Asset Context<\/h2><\/div><\/div>\n\n- Asset Discovery<\/li>\n
- Asset Visibility<\/li>\n
- Enrichment of OT Network Data<\/li>\n
- Detecting Unknown Assets<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Arkime<\/h2><\/div><\/div>\n\n- Historical Network Analysis<\/li>\n
- Explore Sessions<\/li>\n
- Searching for Unusual Communication<\/li>\n
- Support for Incident Investigations<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Incident Analysis<\/h2><\/div><\/div>\n
This accessible training course has been developed for organizations that manage, maintain, or secure OT networks and want to get started with OT monitoring and OT visibility.<\/p>\n<\/div>
The training is suitable for<\/h4><\/div>\n- SOC analysts<\/li>\n
- OT operators<\/li>\n
- OT Engineers<\/li>\n
- Maintenance Engineers<\/li>\n
- OT Consultants<\/li>\n
- Security professionals<\/li>\n
- IT administrators<\/li>\n
- Industrial Network Administrators<\/li>\n
- Organizations Preparing for NIS2<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div>
No specific prior knowledge of Malcolm is required. A basic understanding of networks and industrial automation is a plus.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
Practical Component<\/h2><\/div><\/span><\/div><\/div><\/div>The training combines theory with hands-on exercises. Approximately 40% of the training consists of theory and 60% of practical exercises. Participants work in an OTconnect lab environment where they perform their own analyses on realistic OT datasets and industrial protocols. <\/p>\n
During the labs, topics such as asset discovery, Modbus analysis, PLC scanning, shadow assets, and incident analysis are covered. This provides immediate insight into how Malcolm can be used in practice for OT monitoring and OT security. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>Training Program<\/h2><\/div><\/i><\/span><\/div>Introduction to OT Monitoring<\/h2><\/div><\/div>\n\n- OT vs. IT<\/li>\n
- Why OT Monitoring Is Important<\/li>\n
- Current Threats in OT Environments<\/li>\n
- OT Visibility as the Foundation for Cyber Resilience<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Sensor Placement<\/h2><\/div><\/div>\n\n- Sensor Placement Within OT Networks<\/li>\n
- Purdue Model<\/li>\n
- TAP vs. SPAN<\/li>\n
- Monitoring of Critical Network Segments<\/li>\n
- Common Design Choices<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Malcolm Dashboards<\/h2><\/div><\/div>\n\n- Introduction to Malcolm<\/li>\n
- Using Dashboards<\/li>\n
- Insight into Assets and Communication<\/li>\n
- Interpreting Security Alerts<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/i><\/span><\/div>
NetBox & Asset Context<\/h2><\/div><\/div>\n\n- Asset Discovery<\/li>\n
- Asset Visibility<\/li>\n
- Enrichment of OT Network Data<\/li>\n
- Detecting Unknown Assets<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Arkime<\/h2><\/div><\/div>\n\n- Historical Network Analysis<\/li>\n
- Explore Sessions<\/li>\n
- Searching for Unusual Communication<\/li>\n
- Support for Incident Investigations<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Incident Analysis<\/h2><\/div><\/div>\n
- \n
- SOC analysts<\/li>\n
- OT operators<\/li>\n
- OT Engineers<\/li>\n
- Maintenance Engineers<\/li>\n
- OT Consultants<\/li>\n
- Security professionals<\/li>\n
- IT administrators<\/li>\n
- Industrial Network Administrators<\/li>\n
- Organizations Preparing for NIS2<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div>
No specific prior knowledge of Malcolm is required. A basic understanding of networks and industrial automation is a plus.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
Practical Component<\/h2><\/div>
<\/span><\/div><\/div><\/div>The training combines theory with hands-on exercises. Approximately 40% of the training consists of theory and 60% of practical exercises. Participants work in an OTconnect lab environment where they perform their own analyses on realistic OT datasets and industrial protocols. <\/p>\n
During the labs, topics such as asset discovery, Modbus analysis, PLC scanning, shadow assets, and incident analysis are covered. This provides immediate insight into how Malcolm can be used in practice for OT monitoring and OT security. <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>Training Program<\/h2><\/div>
<\/i><\/span><\/div>Introduction to OT Monitoring<\/h2><\/div>
<\/div>\n- \n
- OT vs. IT<\/li>\n
- Why OT Monitoring Is Important<\/li>\n
- Current Threats in OT Environments<\/li>\n
- OT Visibility as the Foundation for Cyber Resilience<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Sensor Placement<\/h2><\/div>
<\/div>\n- \n
- Sensor Placement Within OT Networks<\/li>\n
- Purdue Model<\/li>\n
- TAP vs. SPAN<\/li>\n
- Monitoring of Critical Network Segments<\/li>\n
- Common Design Choices<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Malcolm Dashboards<\/h2><\/div>
<\/div>\n- \n
- Introduction to Malcolm<\/li>\n
- Using Dashboards<\/li>\n
- Insight into Assets and Communication<\/li>\n
- Interpreting Security Alerts<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/i><\/span><\/div>
NetBox & Asset Context<\/h2><\/div>
<\/div>\n- \n
- Asset Discovery<\/li>\n
- Asset Visibility<\/li>\n
- Enrichment of OT Network Data<\/li>\n
- Detecting Unknown Assets<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Arkime<\/h2><\/div>
<\/div>\n- \n
- Historical Network Analysis<\/li>\n
- Explore Sessions<\/li>\n
- Searching for Unusual Communication<\/li>\n
- Support for Incident Investigations<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/i><\/span><\/div>
Incident Analysis<\/h2><\/div>
<\/div>\n