On Friday there is a full day course on this topic, but for those that can't attend the course this will provide an overview of the techniques and technology. Of special interest is the toolkit to perform forensices on VxWorks and Windows CE, two operating systems commonly seen in ICS embedded devices.