Nexus: A Claroty Podcast

The episode delivers a reasonably thorough definitional breakdown of asset list vs. asset inventory and mentions legitimate tools, but the ideas are foundational OT security education rather than novel insights. In 13 minutes there is no surprising claim a practitioner in this space wouldn't already know.

“Are there uh specific um advisories, vendor uh vulnerability advisories assess attached to that that are applicable to that asset? Are they been patched or not, right?”

“a connection or a configuration to uh um devices that it normally does not communicate with, now is communicating with it, or it's making connections out to uh a uh a public IP when it should only be communicating on private IP addresses”

The content tracks closely to standard CISA guidance and well-worn OT security frameworks; there is no contrarian argument, first-principles reasoning, or counterintuitive position. The closing framing of 'hope to resilience' is a recycled industry phrase.

“I will say that SISA does a very good job providing the step-by-step guidance”

“it kind of moves the organization from a posture of like hope to uh one of uh resilience”

Dan Ricci is a legitimate domain practitioner as founder of the ICS Advisory Project, a credible OT vulnerability resource, but the episode presents him primarily as an author/educator rather than someone sharing hard-won operational experience at scale. He openly admits limited visibility into what asset owners actually do.

“I wouldn't be able to speak directly on how um how many like asset owners are actually uh going in that direction”

“ICS Advisory Project supports it. You can use SysA directly, you can go to the vendor's uh website”

The episode names specific open-source tools (Wireshark, T-Shark, Network Miner) and concrete asset attributes (firmware version, end-of-life status, set-point changes), which is above average for the genre, but there are zero real-world case studies, metrics, dollar figures, or named deployments to anchor the claims.

“passive tools out there that can help with do this asset identification, uh, such as like Wireshark, T Shark. You can use uh Network Miner.”

“a set point was changed, uh a um uh a um a connection or a configuration to uh um devices that it normally does not communicate with”

The host's questions are broad and soft ('give me some examples,' 'how continuous is this'), there is no follow-up pressure or pushback on any claim, and the interview opens with overt promotion of the guest's article. The conversation functions as a friendly recap rather than a probing interview.

“Really great stuff. It's going to be linked here uh in the video. Uh, and I urge everybody to read it, share it internally. There's a lot of valuable information in here.”

“So just kind of as a last thought, I mean, how do you how continuous is this”