Blog

Notes on OT detection.

Signature-less detection, healthy OT networks, and the craft of catching what others miss.

OT networks have a heartbeat — deterministic, periodic, predictable. Knowing what 'healthy' looks like is half of good detection.

Signatures catch what's been seen before. In OT, the attacks that do real damage usually haven't been — here's why, and what to do about it.