There is a perception that control systems, including field devices, have cyber forensic capabilities similar to those of IT systems. That perception is wrong. A control system generally has a Microsoft front-end human-machine interface (HMI) that should have adequate cyber forensics.
Finally, something Joe Weiss and I have been talking about, begging for, and even shouting about for several years in this blog has come to pass. I personally am delighted to see Lofty Perch beginning to see the importance of forensics.