The increasing area of industrial forensics is significantly developing beyond the first wave of investigations related to the SolarWinds/Exchange hacks. While those attacks highlighted the severity of supply chain vulnerabilities and the difficulty of attribution, investigators are now applying