### Overview
Following the initial breach, malicious scripts were executed on ceremony systems, indicating an escalation in the attack. These scripts aim to disrupt key functionalities during the event.

### Details
- **Execution Method**: Scripts were deployed via PowerShell to modify system configurations.
- **Impact**: Disruption in media streaming services and live event broadcasting.

### Insights
The attackers are utilizing tools consistent with known Sandworm TTPs, suggesting a sophisticated operation. Next, we will analyze for signs of persistence mechanisms being established.