Dale Peterson interviews Rob Lee on the S4 Main Stage. They cover a lot of ground and Rob is never shy about sharing his opinions and analysis. They discuss:

• Rob’s first S4
• PIPEDREAM deployed v. employed distinction … and why 2 years later is it still the most dangerous ICS malware?
• Are we really more homogenous?
• What makes a group something that Rob/Dragos tracks as an ICS focused attacker?
• If the answer to intel is do the basics, do I need intel?
• What ICS specific data was VOLTZITE exfiltrating?
• What countries are targeting critical infrastructure? Is it realistic to expect any country to not target its adversaries CI?
• Threat actors focused on manufacturing
• How should an asset owner measure the effectiveness of their detection solution?