This incident report is WILD
The incident was resolved when the attacker’s autonomous agent read a file it shouldn’t have, which is also how the incident started.