Dan Scali from Mandiant will share a collection of anonymized anecdotes about compromised and vulnerable ICS discovered during Mandiant’s proactive ICS security engagements. The session will conclude with an overview of effective detection architectures observed “in the wild” while visiting savvy ICS asset owners.