ATTACK WALKTHROUGH / EVIDENCE TRACE

Attack #2Single Stage, Single PointWater Distribution9m 55s attack · first catch 2m 59s

1FIT001 — primary-grid inlet flow meter (chemical-dosing line)

Attacker's intended impact: No increase in level in primary grid

Physical Residual2m 59s

Where it hit the plant

primary grid — raw-water intake & dosing

1FIT001

elevated reservoir — secondary distribution

consumer / return network

Attack window & detections

2017-10-10 10:24:10 → 2017-10-10 10:34:00 (plant local time)

Physical Residual

2m 59s

Shaded band = labeled attack window from the iTrust ground-truth catalog. Dots = first second each engine flagged the window — click a dot for the evidence.