Failymonster
What happens when a threat actor appears put of the blue? You have a monster of an attribution problem. This talk is all about performing attribution on recent events regardless of "vendor intelligence".