AGENDA
Named by 2 kept items in this workspace.
1 items name it under classification.key entities and 1 under threat actors.
Search every workspace for AGENDA. It matches the name as written, so it can find other things that share it.
The items that name it 2
Group referenced in Mandiant's M-Trends 2026 as actively targeting backup infrastructure, identity services, and virtualization management planes, including deleting backup objects out of cloud storage
All threat actors in this workspace.