PLC password recovery tools have been discovered that leaves a little malware present behind, harnessing Engineering Workstations into botnet slaves.
Splice detects anomalous behaviour from OT nodes (including Engineering Stations within the OT network), and shields OT equipment inside an encrypted overlay network.