Network Traffic Anomaly Baseline Builder for OT Protocol Monitoring with Zeek
Builds baseline profiles of normal OT network traffic patterns using Zeek logs for Modbus, DNP3, and EtherNet/IP protocols, enabling anomaly detection without signature-based rules.