PLC normal/abnormal communications

A baseline of normal PLC communications (HMI, historian and an engineering workstation used only in an approved maintenance window) beside a deviation where an unknown peer connects to the PLC at an unexpected time, flagged as a departure from the baseline to investigate.