Adversaries targeting industrial environments rarely execute immediate physical disruption upon initial compromise. Instead, threat actors spend weeks
