During the analysis of network traffic, it was identified that the threat actor attempted to maintain prolonged access to critical nodes within the grid infrastructure by deploying backdoors. This action is consistent with advanced persistence techniques aimed at ICS/SCADA systems.