Skip to main content

Learning path

OT Security Analyst

Interpret OT telemetry, triage alerts with process context, and know when to escalate.

IntermediateSOC analysts moving into OT
  1. 01IT vs OT priorities
  2. 02Know normal, find abnormal
  3. 03ATT&CK for ICS
  4. 04Incident library
  5. 05First 24 hours

Finish the path

Work each step against your own environment rather than in the abstract — name the assets, protocols and zones you actually operate as you go.