### Context
APT27's ultimate goal in this operation is to exfiltrate sensitive military technology data. This is typically achieved by leveraging the access gained through lateral movement.

### Key Indicators
- **Data Types:** CAD files, proprietary aerospace designs
- **Exfiltration Channels:** HTTPS, FTP

### Next Steps
- Implement data loss prevention (DLP) solutions to monitor and block unauthorized data transfers.
- Conduct a thorough review of data access logs to identify potential leaks.

### Additional Insights
Protecting sensitive military data is of utmost importance. Understanding APT27's exfiltration methods can aid in developing robust defenses to safeguard critical information.