RECAST: ICS SecOps: Active Defense with Effective Incident Response, with Can Kurnaz