Asset discovery in OT

Finding out what is on an industrial network is harder than on a corporate one, because the usual methods can break things.

Active scanning has knocked controllers offline, which is why passive monitoring is preferred here. Devices may not respond to standard queries, may not appear in any inventory, and may have been installed by a contractor a decade ago. You often cannot secure what you cannot enumerate, and enumeration is itself a project.