3 min readSample article
When Valid OT Commands Become Attacks
OT ExploitsIndustrial ProtocolsPCAP Analysis
01 / A personal introduction
About.
I’m Ruqaya, a cybersecurity engineer exploring the space where digital security meets the physical world.
My focus is operational technology and industrial cybersecurity. I’m interested in how attacks against industrial systems behave, what they leave behind in network traffic, and how we can detect and mitigate them safely.
This is my little corner of the internet: a place to share my research, work through ideas, and document what I’m learning along the way.
“I like understanding what an attacker is actually doing on the wire, rather than stopping at the CVE description.”
Following the packets
I study publicly documented industrial vulnerabilities in controlled lab environments. That means looking closely at network traffic, finding useful detection characteristics, and evaluating whether malicious behavior can be blocked without interrupting legitimate industrial communication.
Along the way, I explore PLC and controller security, industrial protocols, and the role of digital twins and cyber ranges in making research safer and more repeatable.