This white paper explains how safe active discovery can complement passive monitoring to close visibility gaps across extended operational technology (xOT) environments. Passive monitoring remains foundational, but it can miss dormant, rarely communicating, shadow, and proprietary-firmware devices or lack details such as firmware and configuration state. Dragos uses a four-stage methodology—Discovery Agendas and Probes, Profiling, Targeted Interrogation, and Extraction and Enrichment—to query assets through rate-limited, protocol-native, administrator-controlled interactions. The approach extends visibility across PLCs, cameras, HVAC, BMS, IIoT, PDUs, and other xOT assets while improving vulnerability prioritization and device hardening. The paper recommends testing collection methods, tig

Join for free to read