Defending SOGARD: Behind the Scenes at the 2021 SANS ICS Summit CTF

Dragos developed an ICS-themed CTF for the 2021 SANS ICS Summit using their SOGARD brewery testbed and TTPs associated with the XENOTIME activity group (including reference to TRISIS) to teach ICS defensive techniques, forensics, and protocol / configuration pitfalls; the event uses a fictional brewery-targeting malware called "BEERSIS" and real ICS artifacts to create varied challenges for defenders.