Health Monitoring of Microsoft Defender for IoT Implementation

Nowadays, more and more industrial organizations, such as manufacturing plants, electric grids, and oil and gas pipelines, are starting to introduce security mechanisms in their environments. The traditional silos, the standard among Operational Technology (OT) networks up until recently, is no longer a norm, especially after the introduction of Industry 4.0. Usually, air-gapped OT networks used to be much more secure because the adversaries should have physical access in order to compromise an asset or steal intellectual property. However, the digitalization and connectivity transformation, which aim to ease and optimize human work, led to the introduction of security challenges. One of the ways to increase the security posture of an industrial environment is by introducing a network monitoring tool for raising the level of visibility. But what if the actual tool loses visibility due to a malfunction? Hence, this paper aims to propose health/operational monitoring solution for Microsoft Defender for IoT (D4IoT) – one of the leading products on the market for monitoring in Industrial Control System (ICS) environment.