Strategic (nation-state / APT)
Criminal / opportunistic
- Ransomware affiliates targeting industrial verticals
- Commodity botnet scanners hitting 502/102/10001
- Hacktivist campaigns against energy and government portals
How to use profiles with Reyhford data
- Pull high-confidence ICS-protocol indicators via TAXII/API
- Enrich in your TIP with public APT reporting
- Ask: does this source also appear on your OT DMZ or VPN?