IoT / OT Assessment

Tool Chain

Steps

1. Network Discovery Scattershot3

   Discover IoT/OT devices on the network via port scanning and service identification.

   Input	OT network segment CIDRs
   Output	findings.json, summary.json
   Usage	scattershot3.py -t <targets> -o <output_dir> -s int
   Notes	Use caution with OT networks. Passive scanning preferred where possible.

2. Device Auditing Gearbox

   IoT/OT device enumeration, protocol analysis, traffic capture, DHCP/DNS/SNMP auditing, firmware checks.

   Input	Device IPs from SS3, network interfaces for traffic capture
   Output	gearbox.db, findings.json, .pcap captures
   Usage	gearbox.py -t <targets> -o <output_dir>
   Notes	Traffic capture auto-invokes Trawler. Manage via Gauntlet.

3. Traffic Analysis Trawler

   Deep packet inspection of captured traffic. Protocol anomaly detection, cleartext credential discovery, DNS analysis.

   Input	.pcap/.pcapng files from Gearbox captures
   Output	findings.json, traffic.json
   Usage	trawler.py -i <pcap> -o <output_dir> -t <targets>
   Notes	Auto-invoked by Gearbox via pr0t31n_trawler helper. Also runs standalone.

4. Reporting Prometheus

   Merge IoT/OT findings into report with device-context fields.

   Input	SS3 + Gearbox + Trawler run directories
   Output	Unified IoT/OT report
   Usage	prometheus.py -i <run_dirs...> -o <report_dir>
   Notes	Uses device context fields (subdevice, interface, classification) from Gearbox.