Answers are grounded in this paper and cite their sources.
When security incidents occur, several challenges exist for conducting an effective forensic investigation of SCADA systems, which run 24/7 to control and monitor industrial and infrastructure processes. The Web extra at http://youtu.be/L0EFnr-famg is an audio interview with Irfan Ahmed about SCADA (supervisory control and data acquisition) systems.
No takes yet. Share an insight, caveat, or question.
Ahmed et al. (2012) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: