RSS CyberWire Daily Follow An incident response reveals itself as GhostShell tool, ShellClient. [Research Saturday] thecyberwire.com
