### Overview
After the backdoor establishment, internal network scanning was detected, followed by data exfiltration activities.

### Key Findings
- **Scanning Techniques**: Utilized a network scanning tool to identify vulnerable systems and sensitive data locations.
- **Exfiltration Channels**: Data was exfiltrated via encrypted channels to evade detection.
- **Impact**: Sensitive student data, including personal and academic information, was targeted.

### Recommendations
- Immediately implement network segmentation to restrict lateral movement.
- Deploy data loss prevention (DLP) solutions to monitor and protect sensitive data.