Comment by sharpshadow

1 day ago

Looks like a solid response with instructions and scripts how to get rid of the infection, but it doesn’t explain how it got there.

Agreed, it doesn't offer a root cause analysis. Remedies are good but how do you prove that it won't happen again? Remember that these are never singular incidents but part of a bad security culture.