That “SolarWinds Attack” leveraging the SentinelOne vulnerbilities is starting to look a lot like the “PROMIS” pattern isnt it?
For some deeper background information listen to “Social Media And The National Security State” here by Whitney Webb, and mirrored here on infogrenades. (downsampled to decrease mp3 file size)
Other keywords: Hamilton 68, Graphika, DARPA, AlfaBank, Sussman, Joffe, BIND DNS function void process_dns_query() logs, Marc Elias, Neustar.