tag: 3am · 1 items
- Engineer — Skip
- SOC/IR — Learn: The 3AM affiliate’s use of an unmanaged host as an entry pivot is a notable lateral-movement pattern, but no IOCs or TTPs are published in this item — file for background awareness on this group’s operational style rather than triggering any immediate hunt.
- Leader — Skip