The attackers embed themselves within the network, creating persistent backdoors that allow them to remain undetected while they continue their operations. A scheduled task was discovered on host 192.168.1.15 that executes a malicious script to maintain persistence. Additionally, a suspicious registry key modification was detected.