VIDEO EPISODES
Lessons Learned From the Frontlines of OT
This series goes beyond the headlines to share real-world lessons from the front lines of industrial cybersecurity. Each episode is based on Dragos team experiences—from incident response to threat hunting and OT defense assessments. Get unfiltered insights into what truly works when securing operational environments.
Episodes 🎬
Episode 1: The 5 Critical Controls – What the Data Tells Us
Episode 2: Incident Response in Action – Real Stories, Real Lessons
Episode 3: Threat Hunting & The Case of Littleton

Episode 1: The 5 Critical Controls - What the Data Tells Us
⏱️ Watch Time: 16 minutes
In this episode, we share benchmark data from the field and examine how each control performs in practice. The discussion zeroes in on the foundational need for OT-native network monitoring and asset visibility as the cornerstone of every other defense. You’ll learn where gaps persist, how visibility enables proactive defense, and which improvements matter most for risk reduction.

Episode 2: Incident Response in Action - Real Stories, Real Lessons
⏱️ Watch Time: 20 minutes
We bring you inside actual incident response engagements, offering you a behind the scenes look at how adversaries were identified, contained, and evicted. These stories highlight not just how to response, but how to build resilience before the next compromise occurs.

Episode 3: Threat Hunting & The Case of Littleton
⏱️ Watch Time: 13 minutes
Threat hunting in OT is a mission-critical capability. In this episode, we walk through the Littleton case, where our team uncovered signs of VOLTZITE activity targeting an industrial organization. We’ll share how the threat was detected and how the customer responded. We include lessons from other OT Watch investigations, making the case for persistent, intelligence-driven threat hunting across OT/ICS environments.

Jacob Benjamin
Services Consulting Director


Hussain Virani
Associate Principal Incident Responder


John Burns
Director of OT Watch Operations
