Advanced threat actor compromise

CRA was engaged by a global service industry company wanted to conduct a compromise assessment as a baseline for their new cybersecurity program. CRA obtained endpoint and network visibility and performed threat hunting across the environment. During the assessment we identified the environment was compromised by an advanced threat actor. Upon detection of the compromise, the client  was able to initiate incident response activities as well as contain and eradicate the threat actor.