The Role of Forensics in OT Security: Enhancing Cyber Incident Response and Threat Mitigation

Abstract

This research paper explores the critical role of digital forensics in securing Operational Technology (OT) systems. As industries increasingly integrate OT with Information Technology (IT) networks, the potential attack surface expands, necessitating robust security measures. Traditional IT forensics is not sufficient for the unique challenges posed by OT environments. This paper investigates the principles, methodologies, and best practices of forensic investigations tailored specifically to OT systems. It also emphasizes the significance of OT forensics in incident response, threat detection, and overall cyber resilience.