4 ms·
That's interesting. My first thought was that the attacker wanted access to internal red team tools under the assumption that resulting indicators would be igno
by mtremsal 6y ago
That's interesting. My first thought was that the attacker wanted access to internal red team tools under the assumption that resulting indicators would be ignored by the blue team, making attacks against their customers less likely to be detected. Wanting to harm FireEye directly is certainly a more simple explanation.