Technical Trade SchoolBOOT advanced-bootcamp
BOOT-OT
Editable professional record

BOOT-OT Evidence Workbook

Professional evidence workbook

Complete this while working the corresponding online lab. Entries save only in this browser until exported or printed. Do not enter live credentials, protected customer information, or uncontrolled personal data.

OT-L1 · Defensive isolated OT lab/tabletop plus evidence defense

Scope, consequence and rollback

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L2 · Defensive isolated OT lab/tabletop plus evidence defense

IPv4 and subnet plan

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L3 · Defensive isolated OT lab/tabletop plus evidence defense

Follow the packet

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L4 · Defensive isolated OT lab/tabletop plus evidence defense

Switch ports and VLANs

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L5 · Defensive isolated OT lab/tabletop plus evidence defense

ACL and firewall policy review

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L6 · Defensive isolated OT lab/tabletop plus evidence defense

BACnet path and broadcast boundary

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L7 · Defensive isolated OT lab/tabletop plus evidence defense

Protocol and certificate boundaries

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L8 · Defensive isolated OT lab/tabletop plus evidence defense

Asset and dependency inventory

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L9 · Defensive isolated OT lab/tabletop plus evidence defense

Supported platform hardening

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L10 · Defensive isolated OT lab/tabletop plus evidence defense

Remote-access design

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L11 · Defensive isolated OT lab/tabletop plus evidence defense

Certificate and time failure

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L12 · Defensive isolated OT lab/tabletop plus evidence defense

Logs and baseline

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L13 · Defensive isolated OT lab/tabletop plus evidence defense

Backup and representative restore

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-L14 · Defensive isolated OT lab/tabletop plus evidence defense

Incident tabletop

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense
OT-C · Defensive isolated OT lab/tabletop plus evidence defense

Defensible BAS network and recovery capstone

Required artifact: Authority and consequence; inventory/dependencies; architecture/flows; named access; baseline/logs/time; change/rollback; incident decision; restore/function proof; residual risk and owner.

Identity, source, mode, authority
Hazards, impacts, prohibited actions, stop criteria
Expected normal and acceptance basis
As-found evidence and timestamps
Calculations with units and reasonableness
Hypotheses, contradictions, discriminating test
Action, expected result, abort/rollback
Result, changed case, restoration, as-left
Open risk, owner, due date, defense