### Overview
Investigation reveals that the attackers have established persistence within the corporate IT environment, allowing them to maintain access even after system reboots.

### Findings
- **Techniques Used:** Modification of startup scripts and registry keys; scheduled tasks pointing to malicious scripts.
- **Affected Systems:** Several key servers and workstations exhibit signs of compromise.

### Next Steps
Attention should now shift towards detecting and preventing lateral movement towards the Operational Technology (OT) network, as this is a likely next step for the attackers.