How to analyze custom protocols in Defender for IoT

Question

Hello,

I am running a PoC with Defender for IoT in our environment. The sensor successfully 'sees' traffic happening in the environment. The issue I have, however, is that we use a custom (TCP) protocol for most of our devices, which is (obviously) not supported by Defender for IoT. I would like to be able to write custom alert rules for this protocol as well. The option to add custom alert rules in the sensor dashboard allows me to base the rule on attributes of for example the TCP or Ethernet packet, such as src/dst IP address and port. I would like to be able to add some conditions for specific operations within our protocol however. Is it somehow possible to write some custom parser for our protocol or to write custom alert rules for the data in TCP packets?

Advice/help would be greatly appreciated!