It takes a lot to get through to people because most people have the attention span of a goldfish struggling for breath in a puddle on the floor next to the broken glass of their tiny fish tank.
10 people per site, per incident, at 50-70 hours/week.
It's thankless work and the people in control don't typically take on contractors. They underpay the actual IR staff. That's why I left the industry. It's a big buddy-system network. Really fucked.
I am repeating what I said elsewhere on a different comm:
I call FULL bullshit on this being Iran.
I personally worked on the cybersecurity incident that happened to St Paul municipal and water systems last year as the Incident Response Technical lead.
The threat actors were not Iranian then. They were Russian.
I personally rebuilt most of their networks, VMware hosts, storage, and servers. The majority of the VMware environments did not have config backups and were running 5 and 6 branches of VMware, only two had 7+.
Their network was insecure. They had IPSEC VPNs between the various location, but there was no further security in that respect. Their firewalls were not being kept up. AAAAND... I warned them that we thought they were still compromised.
In fact, the forensics team called them out as being clean on a group call one week into the incident, but while we were on the call with leadership, they got RE-infected.
I had my team compile a massive set of recommendations for them and I wrote the report. Water Systems specifically. They did not listen to us, apparently. The forensics team also did this.
They had FBI, national guard (fucking incompetent), and law enforcement (useless) in all meetings.
If they got into Water, they’ll get back into city and municipal again. I guarantee it.
This is not Iran. It's the fucking incompetence of city government and Russian threat actors.
Ah, so... "Convicted of rape" is a legal term for criminal court. Both "convicted" and "rape" carry legal definitions distinct from the civil version "found liable for sexual assault."
I know it's splitting hairs, but that's what lawyers do.
Civil court cannot impose jail time and does not have a criminal component. Proceedings for each can be had with separate outcomes. Prime example, OJ Simpson. Not guilty of murder, but found liable for death.
The shit-apple doesn't fall far from the shit-tree, Rand.