The potential use of counterfeit smart grid devices throughout the smart grid represents a real problem. Consequences of propagating fake data, as well as stealing sensitive user or smart grid state information via counterfeit devices are costly. This session introduces a novel system level approach to identify counterfeit smart grid devices. It is a configurable framework that combines system call tracing, library interposition, and statistical techniques as part of its detection mechanism. The results were tested in a realistic testbed that includes both resource-limited and resource-rich counterfeit devices. In total, six different counterfeit devices were analyzed in the adversary model, and these results will be presented as well.