Mindrock Brings OPC UA Detection Engineering to Labshock 2.6
Explore a chemical batch reactor, trace industrial events and build detection rules with Suricata and Wazuh.
Mindrock is now available in Labshock 2.6. The new learning zone is built around Brackwater, a simulated chemical batch process with controllers, SCADA and a historian.
Its 24 guides include 12 practical labs, connecting OPC UA fundamentals with detection engineering and investigation.
Understand what the values represent
Start with OPC UA address spaces, nodes, data types and access rights. Relate the communication to equipment and the batch process it controls.
Knowing how to read a value is only part of the task. Participants also need to understand what the value represents, what a change could affect and which evidence is available to investigate it.
Follow activity into detection
Mindrock connects protocol work with practical security questions:
- Investigate network events with Suricata.
- Build, test and tune native Wazuh detection rules.
- Work with Sigma detection logic.
- Examine alerts and false positives.
- Compare security events with process behaviour and history.
The reactor and safety system are simulated. Detection findings must account for the visibility and limits of the configured environment; an alert alone does not prove that an operation succeeded or changed the process.
Two protocols in different industrial settings
Logfall introduces MQTT. Mindrock focuses on OPC UA. Each brings a different process and set of security questions.
The aim is practical: run the environment, observe communication and use evidence to explain what happened.
More on release