In May 2023, 22 companies that operate parts of the Danish energy infrastructure were compromised in a coordinated attack. Michael Weng presents, in detail, the timeline, the TTPs, and the lessons learned.
He also describes why an OT/ICS NSM solution would not have detected this attack, hence wouldn't have made a significant difference for the defense of the OT/ICS environments.