Product Security Meets Detection and Response (Sans ICS 2022)