I think that was the entrypoint. But I think the ProPublica article wants more research into the weakness in Microsoft's default (at the time) Active Directory

I think that was the entrypoint. But I think the ProPublica article wants more research into the weakness in Microsoft's default (at the time) Active Directory settings that allowed lateral movement, as described in https://www.propublica.org/article/microsoft-solarwinds-golden-saml-data-breach-russian-hackers https://www.propublica.org/article/microsoft-solarwinds-gold...