cipher
Named by 2 kept items in this workspace.
1 items name it under classification.key entities and 1 under tools.
Search every workspace for cipher. It matches the name as written, so it can find other things that share it.
The items that name it 2
Used via 'cmd.exe /c cipher /w:D:\ >nul 2>&1' to overwrite free disk space and hinder data recovery (July incident only)
All technologies in this workspace.