encrypted per platform guidelines · password available to recruiters on request
Multi-source SIEM investigation tracing a RansomHub affiliate from a password-sprayed RDP server through Splashtop jump hosts and rclone exfiltration to forest-wide ransomware deployment over SMB.