ColdTrap: a refrigeration threat observatory

Field notes

The dashboard divides activity into traffic, controller, origin, request, and suspicious-activity views. Its alert criteria include accepted logins, traffic spikes, suspicious requests, and changes to simulated equipment, while routine defrosts and temperature updates are excluded. The interface says addresses remain private and network operators are shown; at capture time, its observation and alert panels were empty.