The increasing area of industrial forensics is quickly developing beyond the early wave of investigations focusing on the SolarWinds/Exchange hacks. While those attacks highlighted the extent of supply chain vulnerabilities and the difficulty of attribution, investigators are now applying these f