@herbz@cyberplace.social Post-exploitation will be very transferable indeed. There should also be some stable patterns in default logs during initial access.