detecting-dnp3-protocol-anomalies
From the author
Detect anomalies in DNP3 (Distributed Network Protocol 3) communications used in SCADA systems by monitoring for unauthorized control commands, firmware update attempts, protocol violations, and deviations from baseline traffic patterns using deep packet inspection and machine learning approaches.
Install
npx skills add 26zl/cybersec-toolkit --skill detecting-dnp3-protocol-anomalies -a claude-code
Installs to .claude/skills/detecting-dnp3-protocol-anomalies/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 77
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- detecting-modbus-protocol-anomalies26zl/cybersec-toolkitThis skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems. It addresses function code monitoring, register range validation, timing analysis, unauthorized client detection, and deep packet inspection for malformed Modbus frames. The skill leverages Zeek with Modbus protocol analyzers, Suricata IDS with OT rules, and custom Python-based detection using Markov chain models for normal Modbus transaction sequences.Engineering★ 82
- analyzing-network-packets-with-scapy26zl/cybersec-toolkitCraft, send, sniff, and dissect network packets using Scapy for protocol analysis, network reconnaissance, and traffic anomaly detection in authorized security testingSecurity★ 82
- detecting-attacks-on-scada-systems26zl/cybersec-toolkitThis skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command injection into PLCs, HMI compromise, historian data manipulation, and denial-of-service against control system communications. It leverages OT-specific intrusion detection systems, industrial protocol anomaly detection, and process data analytics to identify attacks that traditional IT security tools miss.Security★ 82
- data-anomaly-detectordatadrivenconstruction/DDC_Skills_for_AI_Agents_in_ConstructionDetect anomalies and outliers in construction data: unusual costs, schedule variances, productivity spikes. Statistical and ML-based detection methods.Other★ 372
- anomaly-scanindranilbanerjee/digital-marketing-proScan connected platforms for anomalies against stored baselines, with likely causes. "why did our CPA spike"Other★ 909
- Datadog Anomaly Detectoragentskillexchange/skillsLeverages the Datadog API v2 metrics and events endpoints to detect anomalous patterns. Uses the Datadog Monitors API to create dynamic thresholds and sends escalations via OpsGenie REST API.Engineering★ 58
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in