> For the complete documentation index, see [llms.txt](https://notes.cavementech.com/pentesting-quick-reference/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.cavementech.com/pentesting-quick-reference/ot-security/ot-security-labs.md).

# OT Security Labs

{% embed url="<http://youtube.com/@utilsec>" %}

{% file src="/files/RVTBVRHw4wXUJD47H5Ga" %}

### Labshock

🎥 Labshock YouTube Videos step by step

Learn, test, simulate OT Security (for FREE)

🔸 Intro to Labshock
\
<https://lnkd.in/dSDi\\_zeA>
\
Overview of ICS/OT security gaps and how Labshock solves them with labs, IDS, SIEM, pentest and training

🔸 Demo
\
<https://lnkd.in/dgS9WBpU>
\
In this video, we walk through Labshock - a virtual lab for learning OT and ICS security.

🔸 Linux Install
\
<https://lnkd.in/dJCeBt5N>
\
Step-by-step install on Debian/Ubuntu with Docker and Git, run full OT lab in minutes

🔸 Windows Install
\
<https://lnkd.in/dJCeBt5N>
\
Setup on Windows 10/11 with Docker Desktop, Git and WSL2, ready-to-use OT lab

🔸 MacOS Install
\
<https://lnkd.in/dwPyQHZp>
\
Install on Intel or ARM Mac, run Labshock with Docker Desktop, SCADA, PLC and pentest tools

🔥 (NEW) Splunk Integration
\
<https://lnkd.in/dgS9WBpU>
\
One-click Splunk inside Labshock, OT log collection, parsing, alerts, MITRE ATT\&CK detections

🔸 Modbus Direct Communication
\
<https://lnkd.in/dduBzscb>
\
Send write commands to coils and registers, bypass SCADA, analyze detection

🔸 Modbus MITM Attack
\
<https://lnkd.in/dNGGzM6R>
\
Run ARP spoofing, intercept and modify coil values, see impact on SCADA and PLC

🔸 Modbus Deep Dive (Live)
\
<https://lnkd.in/dNjUT8PW>
\
Live demo of Modbus protocol, abuse techniques, detection tips, Q\&A

🔸 Scale to 100 PLCs
\
<https://lnkd.in/d2-mmQks>
\
Simulate large-scale ICS with 100 PLCs, build SCADA views, prepare for IDS and SOC testing

👉 Try Labshock: <https://lnkd.in/dGK8k>