During a slow period at Saudi Aramco, cyber attackers gained access to the company's network and administrative privileges, leaving a skeleton crew of Western staff on defense. Their goal was to gain access to a domain controller to communicate with all other computers in the network.