The Lazarus Group has been identified using persistence techniques to maintain access in the network, ensuring their ability to monitor and execute transactions over an extended period. Anomalous network traffic was detected indicating the deployment of a scheduled task to run a known backdoor malware associated with Lazarus activities.