So at this point, we're going on year seven or eight of this FBI investigation.

Right around this time, uh, you know, we're in pursuit mode, right? So we're trying to get as much visibility into their infrastructure, and around this time, we get a, a data intercept on their systems that are controlling all their malware.

So they had a, a multilayer command and control infrastructure where all the malware was reporting up to the first layer, and then that layer was forwarding on to a couple of servers that were hosted in different places.

And we were able to, as a team, figure out where those servers were located.

So we went, uh, with legal process.

We, we got a data intercept on a couple of these top level command and control servers, and we were able to see the communications for all the botnet, which meant that we got to see when they updated their malware, what some of their campaigns looked like, how they were loading additional plug-ins.

So at this time, this group had a number of different lines of business.

Um, so you know, he was off the charts compared to what we see, even at CSIPS, where it's all very advanced.