Do Threat Actors know when they are being hunted? (Enterprise)

Hear me out.. I work in a very large org. I have been investigating suspicious activity for a few months, carefully pulling a thread, following evidence documenting etc etc but just couldn’t find the smoking gun to shut it down.

Over the weekend I caught a huge break. The “thing” I was hunting was hiding in plain sight cleverly named to match the other things around it. A real “cuckoos egg” situation.

It’s an AWS elb. So I start to …

cybersecurity enterprise threat threat actors