Enabling a Blended IT/OT SOC with Dragos’s Splunk OT Add-On
Summary: Dragos and Splunk released a new integration that brings Dragos Platform OT capabilities into Splunk's Enterprise Security offering, pairing the Dragos OT add-on with Splunk's OT Security add-on. The integration provides ICS/OT asset discovery, threat detection, vulnerability management, and incident response within an existing SOC, drawing on data sources including protocols, network traffic, data historians, host logs, asset characterizations, and anomalies.
Bottom line: Industrial organizations in electric utilities, oil & gas, and manufacturing are expanding network connectivity and connecting critical infrastructure, which the source says brings new threats targeting both IT and OT networks. The pitch is that one SOC view across both can shorten detection, response, and mitigation time when an adverse event occurs.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026