22 Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Bli https://isc.sans.edu/diary/33220