Dragos Platform 1.6 Webinar Recap
Summary: Dragos co-hosted a SANS webinar on June 2 with CTO Jon Lavender and VP Ben Miller to detail and demo Dragos Platform version 1.6, which adds asset inventory and identification capabilities and incorporates the MITRE ATT&CK for ICS Framework into its notifications. The platform uses passive monitoring fed by a network tap, span port, or traffic aggregator to the Dragos Sensor, and the company says it can passively detect firmware versions for vendors including SEL, Rockwell, GE, Yokogawa, and Emerson.
What you should know: The deployment tradeoff the hosts describe is the one most OT teams face: tapping closer to the edge to watch traffic to key assets, or sitting in the backplane to catch lateral movement between sites and security layers - and the number of collection points you can support decides which.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026