## Overview
Post-initial access, malicious scripts were activated within Twitch's server environment. These scripts appear to have been custom-developed for the environment, indicating a high level of expertise from the attackers.

## Key Findings
- **Script Characteristics**: The scripts executed were obfuscated, employing advanced techniques to avoid detection by standard security tools.
- **Targeted Functions**: The scripts primarily targeted data retrieval functions, particularly those related to user and financial records.
- **Indicators of Compromise (IoCs)**: Several new IoCs were identified, including file hashes and common command-line arguments used by the scripts.

## Next Steps
Efforts are underway to neutralize the scripts and patch the vulnerabilities exploited. Analysts are working to establish the persistence mechanisms employed by the attackers to maintain access.