The presentation draws attention to practical threat detection and incident response from dissecting advanced OT (Operating Technology), ICS (Industrial Control System) adversary threat capabilities, tactics techniques and procedures. Dean will illustrate why cyber weapons and techniques used in industrial attacks may be more important than adversary attribution for tactical ICS incident response. Seeing the 1985 movie Clue is not a prerequisite, but it will be more fun if you did see the film before the talk.