Critical infrastructure is an increasingly attractive target for cyber attackers. Gartner predicts 30% of critical infrastructure organizations will experience a security breach by 2025. Red Electrica (REE), the national electricity grid in Spain, wanted to gain visibility on what would happen if a configuration error exposed the substation via VPN. See how results started rolling in immediately after deploying a deception decoy in the form of a real electrical substation and how OT systems can use deception technology to not only detect and stop attacks but collect IoCs and TTPs that can be used in OT systems to prevent future attacks.