Actually there are some network based scanner trying to handle this using AI to spot usual and unusual traffic. Seems good but not well known (and I guess give

Actually there are some network based scanner trying to handle this using AI to spot usual and unusual traffic. Seems good but not well known (and I guess given the attention the vendor is more office system not industrial system oriented). The problem as said is management. Those on top of these might not have the mindset to handle this angle. After all they are more engineer firm and organisation. And some may still have the security by obscurity and isolation-alone (then someone to mgt it via home use an open dial up …). It is the mentality and the market absence which is the key barrier of entry. Antivirus btw is useless even in office IT. Baseline yes. But useful no. Any decent professional hacker know the big few and test against them down to try to test whether it is in such env and react differently. Still think network based scanner etc is the better approach. Of course one worry about service denial by fake attack … still …