If you need me I'll be in the Andromeda Galaxy

I often use my personal SIGINT experiences to describe CN APT groups, and rightly accused of mirroring bias. Still, CN has been pillaging and imitating us for decades, so if you want to see what they're up to today on the CNO front, look at what the IC was doing 10+ years ago.

Curate your collection

Sometimes the C2 framework itself manages the collateral damage, and not without good reason, I'm sure :D

*downselection of activity not to scale

It can be helpful to think about what you're trying to get away from. What is the "South Star" for your product, organization, or workflow? Given how much time I spend copying and pasting data from one system to another, Ctrl+C Ctrl-V is my South Star in almost everything.