-
@billmarczak @AmnestyTech Admins at large organization networks: you may want to search DNS logs for the domains listed in github.com/AmnestyTech/investigations/tree/master/2021-07-18_nso and possibly even block future access. It would be great if these files could be kept up-to-date with IOCs detected in future analysis.