Kronos - Why has it been a month since compromise but we have no data on the malware used?

It’s been a month, they hired Mandient, the impact was huge. At what point do we get insight into the attack, IoC’s, ingress data, etc…

Anyone able to find data on it?

compromise cybersecurity data kronos malware