Deep dive into the Solorigate second-stage activation

Something I find concerning about sophisticated attacks like this is the asymmetric time expenditure it places on the victims and investigators.

It'll be tricky to push back attackers (as a trend) if they're able to consume defenders' time resources.

That makes me wonder what are useful avenues for defenders to explore in order to reduce defence time cost.

Much of it, I think, will come down to the ability to simplify and reduce the size of systems and software infrastructure without impeding business operations.