Systems and methods for asset discovery in an operational technology (ot) network

A non-transitory computer readable medium storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:

• identifying a discovery driver that enables an endpoint management agent running on a host device communicatively coupled to a subnet of an operational technology (OT) network to perform discovery of devices, software, or both, running on the subnet of the OT network;
• transmitting the discovery driver to the endpoint management agent running on the host device;
• transmitting a command to the endpoint management agent running on the host device, wherein the command is for the endpoint management agent to perform discovery of the subnet of the OT network, via the discovery driver, using a first protocol and a second protocol;
• receiving, from the endpoint management agent running on the host device, discovery data collected during the discovery of the subnet of the OT network using the first protocol and the second protocol;
• and
• updating a table based on the discovery data, wherein the table comprises records corresponding to the devices, the software, or both running on the OT network.

A method, comprising:

• identifying, via an asset manager application, a discovery driver that enables an endpoint management agent running on a host device communicatively coupled to a subnet of an operational technology (OT) network to perform discovery of devices, software, or both, running on the subnet of the OT network;
• transmitting the discovery driver from the asset manager application to the endpoint management agent;
• transmitting, from the asset manager application to the endpoint management agent, a command to perform the discovery of the subnet of the OT network via the discovery driver;
• transmitting, on the subnet, via the endpoint management agent, based on the command, a first discovery query in a first protocol;
• receiving, via the endpoint management agent, in response to the first discovery query, first discovery data;
• transmitting, on the subnet, via the endpoint management agent, based on the command, a second discovery query in a second protocol;
• receiving, via the endpoint management agent, in response to the second discovery query, second discovery data;
• transmitting, from the endpoint management agent to the asset manager application, the first and second discovery data;
• and
• updating a table based on the first and second discovery data, wherein the table comprises records corresponding to the devices, the software, or both running on the OT network.