This executive summary explains MITRE Engenuity’s first ATT&CK Evaluations for ICS, which assessed how well security platforms detect real‑world threats in operational technology environments. The 2021 evaluation used a realistic attack scenario based on the XENOTIME threat group, known for its targeting of critical industrial systems. The report highlights how the Dragos Platform and other participants performed in detecting adversary behaviors during the simulated intrusion. It serves as a guide to understanding the evaluation’s structure, purpose, and relevance to improving ICS threat detection capabilities.

Join for free to read