Yeah,

exactly.

But those are still effective in a lot of cases, right? If somebody's launching a campaign from particular infrastructure, yeah, you can block that at scale.

But they're also easy to share at scale, right? It's easy for me to have a threat feed that's pumping out IPs and domains and hash values quickly.

It gets a lot harder when you're talking about things that are like single use.

So you have domain generating algorithms and stuff that have been around for a while that maybe are burning through like one time use domains and their patterns.

You have to recognize the pattern, not the specific, the URL itself or the domain itself is not that important.

Um, but when it comes to like that Intel sharing that you do and that you see, uh, what do you find to be kind of like the more helpful ways to share info? And if you could ask, you know, somebody or something to improve the way they share Intel, what would that be?

You want to expand on that a little bit? Sure.

So I think Tony made some really great points that are applicable and some of Kyle's points applicable to this prediction as well.

So one of the things that we really look at is, in the incident response community broadly is dwell time, right? That's the, how long has an actor been in a network before they actually launch a specific attack? And that's one of those, you know, you look at the semi-autonomous malware piece that Kyle was just talking about.

And when we look at AI assisted malware, that's where I think we're starting to see a major, you know, impact, right? That dwell time is compressing fairly quickly.

And it's not that gen AI and the various AI tools that are available today are creating super malware for us.

It's just that I think Tony, I think you used the term democratization earlier, right? It's democratizing availability of tools of relatively complex tools and skill sets that are turning malware development and criminal activity using malware, whether it's yours or somebody else's into a commodity action.

So the, the, technical debt that's required to learn how to code to, you know, to cut your teeth on these things early on and, you know, kind of rise up through the ranks doing this stuff is shrinking significantly.

But thoughts there, Randy?