Passive network monitoring sensors deployed on SPAN/TAP ports at OT network boundaries OT intrusion detection system (Dragos Platform, Nozomi Guardian, Claroty xDome, or Suricata with OT rulesets) ...