OT networks face targeted adversaries that specifically study industrial protocols and processes, yet many operators lack the visibility to detect them. This session examines how continuous OT monitoring, asset inventory, and industrial threat intelligence combine to surface malicious activity across IT, OT, and IoT. It covers building detection use cases around known adversary behaviors and operationalizing incident response tailored to plant environments, where uptime and safety constrain traditional playbooks. Attendees will learn how to translate threat intelligence into practical detection and response for industrial systems. (#SSDGS)