Visibility: Overview

At this point in the workshop we know very little about the network, the devices on the network, and the associated traffic flows. We want to begin building our undstanding, such that:

• You can articulate a high-level purpose of the network, such as what control systems are present;
• Discover recent and noteworthy activities on the network, such as cyber events or deviations from established norms/baselines;
• Understand existing network traffic flow, particularly between known groups of systems (in Claroty, these are known as zones)

---

TASKS

1. In the left-hand navigation menu, click to Visibility > Overview.
2. For the purposes of this lab, change the time series to Last Year in the top-right corner.
3. Using information avaiable on the Visibility Overview, Assets, and Zones pages, determine:
   • The total number of assets
   • The number of IT to OT to IoT assets
   • Most common OT Operation by Type
   • What are the classes of assets detected in the OT Asset Distribution By Site?
4. What network subnets are present on the network?

---

REFLECTION

• What types of systems appear to exist within the environment?
• If you were to customize the Overview dashboard, what data would you want to include? What would you want to remove?