Our team just released a fresh ebook - Unleash the Power of Censys Search: A Hassle-Free Handbook for Cyber Heroes.

There’s a lot of great content in here but one of the things I find most helpful was the example covering how to discover operational technology (OT) and internet of things (IOT) assets in Search.

You can start by inputting protocols and names/manufacturers of interest in plaintext. The example in the ebook starts with:

BACnet and siemens

Which you could then combine with a key-value pair like a service port:

BACNet and siemens and services.port= 80
 

Which can return potential HMIs accessible by the outside world.
 

Find more info about this example as well as other great queries in the ebook!