GrassMarlin

GrassMarlin is a GOTS tool (free) can be used by any organization and is a passive network and discovery tool that identifies control system components and devices and creates a network architecture diagram and inventory which can be imported into the CSET or Visio tools.

VMWare Workstation Player

Workstation Player is a COTS product (free and purchase versions) can be used by any organization as a virtual machine. The Kali and SamuraiSTFU tools run on a VM. 

Flying Squirrel

Flying Squirrel is a Government-off-the-Shelf (GOTS) free software application developed by the U.S. Naval Research Laboratory that any organization can use to provide real-time discovery, analysis, and mapping of IEEE 802.11a/b/g/n wireless networks. Any organization can use the tool to create a Test and Development Environment and simulate the DoD Host Based Scanning System. 

OSISoft

The OSISoft Pi System is a COTS product (purchase version) that is a highly secure unidirectional gateway (data diode) used to transmit data from the Level 3 historian to the Level 4 historian. The Pi System enables the business data such as utility consumption to move from the OT side to the IT side for invoicing and transactional data processing. It has a Navy ATO.

Nessus Network Monitor

Industrial Security from Tenable delivers non-intrusive, continuous asset discovery and vulnerability detection for safety-critical operational networks. Purpose-built for OT systems, the sensors use passive network monitoring and deep packet inspection to safely detect new assets and reveal OT vulnerabilities across a wide range of protocols and manufacturers – including Siemens, ABB, Emerson, GE, Honeywell, Rockwell/Allen-Bradley, Schneider Electric, and more. The sensors powering Industrial Security are currently part of the DISA-sponsored ACAS solution, which has received ATOs through nearly 9,000 instances across the entire DoD and Intelligence Community. The complete Industrial Security solution – sensors plus management console – is undergoing evaluation in test environments such as the NCRC and should be ready for connection to the DODIN in early 2018.