### Executive Summary
Internal reconnaissance activities have been detected, indicating preparation for final data extraction.

### Technical Details
- **Techniques Used**: Network scanning and mapping of critical systems.
- **Tools Detected**: Use of custom scripts mimicking legitimate admin tools.

### Next Steps
Prepare for potential final data extraction and reinforce monitoring on critical assets.