A legacy SCADA system is m place in a manufacturing facility to ensure proper facility operations. Recent industry reports made available to the security team state similar legacy systems are being…

Full packet capture and log analysis are forensic and investigative tools that require significant storage and human analysis - they do not provide automated, real-time continuous threat detection.

Passive vulnerability scanners identify configuration weaknesses and unpatched software but do not detect active intrusion attempts or ongoing attack activity in real time.

Red-team threat hunting is a periodic, human-driven adversarial simulation exercise and does not provide continuous automated monitoring of live network threats.

A network-based intrusion detection system (NIDS) passively monitors network traffic for known attack signatures and anomalous behavior without requiring any software installation on the legacy SCADA devices themselves - making it the best fit for environments where endpoint security controls are limited due to device age or vendor restrictions.