Claim

Saudi Aramco cyber-attack (2012) INVOLVES Domain controller

The attackers focused on domain controllers and obtained administrative privileges on them.

Episode
EP 30 — Shamoon
Origin
Explicit
Confidence
98% (extractor score, not a fact score)
Speaker
Jack Rhysider
Attributed source
—

Transcript evidence

“The attackers focused on these domain controllers”

Jack Rhysider · offsets 5753–5802

“the attackers had access to Saudi Aramco’s network and had administrative privileges to the domain controllers”

Jack Rhysider · offsets 6099–6209

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:29:42.732075+00:00

claim:ep030:4d3a7ae7a0b9