--- title: Lessons Learned from the Frontlines of OT | Dragos description: This series helps OT defenders cut through the noise to help prioritize what OT cyber vulnerabilities matters most and should be tackled first. Watch now → image: https://hub.dragos.com/hubfs/Dragos-LessonsLearned_Episodes.png --- [![lineup](https://hub.dragos.com/hs-fs/hubfs/raw_assets/public/Dragos_June2021/images/Logo-2.png?width=1996&height=115&name=Logo-2.png "lineup")](https://www.dragos.com/?hsLang=en) - [Dragos Platform](https://www.dragos.com/cybersecurity-platform/) - [Services](https://www.dragos.com/services) - [Resources](https://www.dragos.com/resources) - [Company](https://www.dragos.com/about) - [Dragos Platform](https://www.dragos.com/cybersecurity-platform/) - [Services](https://www.dragos.com/services) - [Resources](https://www.dragos.com/resources) - [Company](https://www.dragos.com/about) - [Blog](https://hub.dragos.com/blog) [Request a Demo](https://www.dragos.com/request-a-demo?hsLang=en) ## VIDEO EPISODES # Lessons Learned From the Frontlines of OT This series goes beyond the headlines to share real-world lessons from the front lines of industrial cybersecurity. Each episode is based on Dragos team experiences—from incident response to threat hunting and OT defense assessments. Get unfiltered insights into what truly works when securing operational environments. ### Episodes 🎬 Episode 1: The 5 Critical Controls – What the Data Tells Us  Episode 2: Incident Response in Action – Real Stories, Real Lessons  Episode 3: Threat Hunting & The Case of Littleton  ![](https://play.vidyard.com/8Bfj63v6s8gxDNhGdaurFV.jpg) ### Episode 1: The 5 Critical Controls - What the Data Tells Us ⏱️ Watch Time: 16 minutes In this episode, we share benchmark data from the field and examine how each control performs in practice. The discussion zeroes in on the foundational need for OT-native network monitoring and asset visibility as the cornerstone of every other defense. You’ll learn where gaps persist, how visibility enables proactive defense, and which improvements matter most for risk reduction.  ![](https://play.vidyard.com/7q71fvCNMiUf7GwYuypk33.jpg) ### Episode 2: Incident Response in Action - Real Stories, Real Lessons ⏱️ Watch Time: 20 minutes We bring you inside actual incident response engagements, offering you a behind the scenes look at how adversaries were identified, contained, and evicted. These stories highlight not just how to response, but how to build resilience before the next compromise occurs.  ![](https://play.vidyard.com/6kyioWmMCb7MFFdaH5LXBb.jpg) ### Episode 3: Threat Hunting & The Case of Littleton ⏱️ Watch Time: 13 minutes Threat hunting in OT is a mission-critical capability. In this episode, we walk through the [Littleton case](https://www.dragos.com/resources/case-study/hunting-active-threats-littleton-grid-with-dragos-platform-ot-watch/?hsLang=en), where our team uncovered signs of VOLTZITE activity targeting an industrial organization. We’ll share how the threat was detected and how the customer responded. We include lessons from other OT Watch investigations, making the case for persistent, intelligence-driven threat hunting across OT/ICS environments.  ![Jacob Benjamin - Headshot](https://hub.dragos.com/hs-fs/hubfs/Jacob%20Benjamin%20-%20Headshot.jpg?width=300&height=300&name=Jacob%20Benjamin%20-%20Headshot.jpg) ##### Jacob Benjamin ###### Services Consulting Director ![Dragos\_Logo\_RGB\_212](https://hub.dragos.com/hs-fs/hubfs/111%20Logos%20-%20Dragos/Logos%20-%20Color/Dragos_Logo_RGB_212.png?width=150&height=35&name=Dragos_Logo_RGB_212.png) ![Hussain Virani - Headshot](https://hub.dragos.com/hs-fs/hubfs/Hussain%20Virani%20-%20Headshot.jpg?width=300&height=300&name=Hussain%20Virani%20-%20Headshot.jpg) ##### Hussain Virani ###### Associate Principal Incident Responder ![Dragos\_Logo\_RGB\_212](https://hub.dragos.com/hs-fs/hubfs/111%20Logos%20-%20Dragos/Logos%20-%20Color/Dragos_Logo_RGB_212.png?width=150&height=35&name=Dragos_Logo_RGB_212.png) ![John Burns - Dragos Headshot](https://hub.dragos.com/hs-fs/hubfs/John%20Burns%20-%20Dragos%20Headshot.jpg?width=1939&height=1939&name=John%20Burns%20-%20Dragos%20Headshot.jpg) ##### John Burns ###### Director of OT Watch Operations ![Dragos\_Logo\_RGB\_212](https://hub.dragos.com/hs-fs/hubfs/111-Logos-Dragos/Logos%20-%20Color/Dragos_Logo_RGB_212.png?width=150&height=35&name=Dragos_Logo_RGB_212.png) ![Dragos\_YIR2025\_iPad\_1x\_Final\_Straight\_Final](https://hub.dragos.com/hs-fs/hubfs/Dragos_YIR2025_iPad_1x_Final_Straight_Final.png?width=450&height=450&name=Dragos_YIR2025_iPad_1x_Final_Straight_Final.png "Dragos_YIR2025_iPad_1x_Final_Straight_Final") [![SKIP](https://no-cache.hubspot.com/cta/default/5943619/981f4e1b-339b-4a77-8a4f-f4ac67cce93c.png)](https://cta-redirect.hubspot.com/cta/redirect/5943619/981f4e1b-339b-4a77-8a4f-f4ac67cce93c) ### See the Dragos Platform in Action [Request a demo](https://www.dragos.com/request-a-demo/?hsLang=en) COPYRIGHT © 2026 DRAGOS, INC., ALL RIGHTS RESERVED. For information about how we collect, use, share or otherwise process information about you, please see our [privacy policy](https://www.dragos.com/privacy/?hsLang=en). and [Terms of Service](https://www.dragos.com/terms/?hsLang=en) for more information. ![](https://urldefense.com/v3/__https://s.ml-attr.com/getuid?https*3a*2f*2fattr.ml-api.io*2f*3fdomain*3ddragos.com*26pId*3d*24UID__;JSUlJSUlJSUl!!ObtO0C2TD-k!Vfd64U6OpsMuW83nQ96X9YyxWiTq6RmXYsH_63ZnjCJK00aDGxSTUBPUyTamgAOc$)