The speaker is contemplating whether to leave a hacker logged into a system to avoid missing out on information they need to catch the hacker, or to revoke their access immediately and eliminate the risk of further harm.
After an initial infection, a threat actor gained access to a company's domain controller, giving them full admin access over the network and leaving the business at their mercy.
Outsourcing IT infrastructure can lead to lost credentials and difficulty in managing security risks, as well as make companies more vulnerable to intellectual property theft.
The speaker analyzes the accounts and activity on a police department server and discovers an active logged-in account with potential access to private and sensitive information. The speaker raises concerns with the police chief about who else has access to the server.
The possibility of a connection between the mayor's home computer and the police department's server has arisen in a case, leading to speculations of potential wrongdoing and motives against the police department.