domains / families / security / implementing-dragos-platform-for-ot-monitoring

implementing-dragos-platform-for-ot-monitoring

separate

Deploys and configures Dragos Platform sensors and detection analytics for OT/ICS network monitoring, using industrial protocol parsers and threat-intel packs to detect groups like VOLTZITE, CHERNOVITE, and KAMACITE. Use when standing up OT-specific network detection and response or an OT SOC, or integrating OT monitoring into an enterprise SIEM; not for IT-only or Claroty/Nozomi environments.

When to use

• When deploying an OT-specific network detection and response (NDR) solution for industrial environments
• When needing threat intelligence-driven detection against known ICS threat groups (VOLTZITE, CHERNOVITE, KAMACITE)
• When building an OT SOC capability with purpose-built industrial security tooling
• When requiring asset discovery and vulnerability management alongside threat detection in a single platform
• When integrating OT security monitoring with an enterprise SIEM (Splunk, Sentinel, QRadar)

When not to use

• IT-only network monitoring without ICS components
• Endpoint detection and response (EDR) on OT workstations
• Environments standardized on Claroty or Nozomi

Skill page

Source