Industrial Control System data

Industrial Control System data in MaCySTe uses the ModBus protocol over TCP on the standard port 502.

For the core scenario, the helm, engine telegraphs, and internal Steering Gear Control System elements can be instrumented by leveraging a custom ModBus probe.

To look at the data, ensure you have run MaCySTe with a scenario integrating OpenSearch and the probe (such as the built-in siem one).

Then, you will be able to access every ModBus packet in structured format by opening the MaCySTe GUI, clicking on SIEM, and taking a look from the Discover page at messages present inside of the modbus-* OpenSearch indexes