Which OT alerts matter most for a small factory?

The ones that mean something changed in the process: a write or program download from an unexpected computer, a controller being stopped, started or switched to another mode, office traffic reaching the control level, and any of this outside working hours. These are rare in normal operation, so each one deserves a call to the person responsible for the line. Alerts about volume or new destinations matter too, but on the IT side, where most attacks on factories start. Agree in advance who receives OTOT: operational technology. The computers that run machines, production lines, building systems and utilities. alerts, how quickly someone looks, and that nobody disconnects a production host without asking the shift lead, because an abrupt disconnection can cost more than the alert. From the Pro plan, NetSenX raises exactly these OT alerts: unauthorised writes, traffic crossing plant network levels, off-hours OT activity and S7comm commands, next to the beaconing, scanning, lateral movement and unusual outbound volume alerts it raises on every plan.

← All 50 questions on OT and IoTAll topics