ICS/SCADA › Module 7 › Lesson 3
Asset Inventory
Asset inventory literacy names OT CMDB fields — firmware, vendor, zone, criticality — on fictional plant CSV on YOUR $OT_LAB — defensive OT literacy only; no real-plant attacks, unauthorized OT scans, or exploit cookbooks.
Visual · t38_asset_inventory
Asset Inventory literacy. $OT_LAB only. Original Cyberlium.
Opening
OT asset inventory beats spreadsheet chaos — literacy defines fields defenders need before incident response.
OT asset records include device type, vendor, firmware version, zone, Purdue level, criticality, and owner. Cyberlium maintains fictional asset inventory CSV on OT lab — not importing employer live CMDB exports without authorization. Cyberlium Topic 38 practices on $OT_LAB — YOUR fictional OT templates, zone diagrams, and labeled checklists under $HOME/cyberlium-lab/t38-ot/ no real-plant attacks, unauthorized OT scans, or exploit cookbooks. Next: Monitoring Lab.
1. What Asset Inventory covers (named)
Inventory literacy: PLC-001 row with vendor, firmware, zone, last patch review, backup status. Correlate inventory with M6 zones and M7 visibility sources. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.
Write three fictional asset rows in LAB-OT-001 inventory CSV stub. No live serial numbers or real plant hostnames. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.
Command guide
Try these commands — What Asset Inventory covers (named)
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
NIST SP 800-82 — https://csrc.nist.gov/publications/detail/sp/800-82/rev-3/final CISA ICS — https://www.cisa.gov/topics/industrial-control-systems
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export OT_LAB=${OT_LAB:-$HOME/cyberlium-lab/t38-ot}
cat > "$OT_ASSETS/asset-inventory.csv" <<'EOF'
asset_id,type,vendor,firmware,zone,criticality,purdue_level
PLC-001,PLC,LAB-Vendor,1.2.3,OT-Cell,high,L1
HMI-001,HMI,LAB-Vendor,4.0.1,OT-Cell,high,L2
ENG-001,Engineering WS,LAB-Vendor,Win10-LAB,DMZ,medium,L3
EOFCommand — copy this
grep -E 'PLC-001|HMI-001|asset_id' "$OT_ASSETS/asset-inventory.csv"
Primary tools to practice this lesson: grep, python3. Reference sites: NIST SP 800-82 (https://csrc.nist.gov/publications/detail/sp/800-82/rev-3/final); CISA ICS (https://www.cisa.gov/topics/industrial-control-systems). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Why Asset Inventory matters for defenders
Incomplete inventory delays incident containment. Firmware columns drive patch governance in M8. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.
Students maintain lab inventory CSV on notes. Production follows OT asset management programs. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.
3. $OT_LAB boundary
Forbidden: scraping live OT device serials into lab CSV. Allowed: fictional asset inventory stub on OT lab. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.
Ship: asset inventory CSV stub. Next: Monitoring Lab.
4. What you ship: asset inventory card for $OT_LAB
Asset inventory literacy names OT CMDB fields — firmware, vendor, zone, criticality — on fictional plant CSV. $OT_LAB named. NEVER real-plant attack steps. chmod 600.
5. What you record before the next lesson
Date (UTC). Asset Inventory card. $OT_LAB named. File t38-m07-l03-asset-inventory.txt chmod 600.
6. Wrong vs right: plant attacks vs YOUR OT lab sims
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Export employer OT CMDB without scope into lab.
Right
Write asset inventory card for YOUR $OT_LAB. Next: Monitoring Lab.
Mission: document Asset Inventory on YOUR OT lab
1) Name literacy rows on $OT_LAB. 2) Write NEVER list (no real-plant attacks, unauthorized OT scans, or exploit cookbooks). 3) chmod 600. Never scan or exploit real industrial networks.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: literacy on $OT_LAB — not attack recipes against live plants.
Knowledge Check
APPLY: Asset Inventory on Cyberlium means:
Multiple choice
Knowledge Check
APPLY: True or False: Topic 38 includes ICS attack cookbooks against real plants.
True or False
Knowledge Check
APPLY: Asset Inventory literacy on Cyberlium uses:
Multiple choice