>Peter Stokes
>Scattered Spider guy
>Arrested
>Microsoft helps FBI
>Read court documents
>Page 12
>Microsoft tracks Stokes from GDID
>Microsoft Global Device Identifier (GDID)
>Stokes used Windows
>Page 34
>GDID assigned to each OS install
>GDID unique to each device
>GDID only change if OS wiped
>Stokes GDID 6755467234350028
>GDID reported internet activity to Microsoft
>GDID showed Stokes using Ngrok
>GDID reported Stokes IP address
>GDID showed Stokes web activity
>GDID showed timestamps of web activity
>GDID mapped with video game activity
>GDID showed games played
>GDID undocumented
>GDID only mentioned in one MSDN document
>Azure UCDOStatus
>Azure Monitor Logging
(100% stolen from https://x.com/vxunderground/status/2073427396535963967)
interesting development...
@Kerosene @HonkHonkBoom @pernia @sendpaws @7666 @sun @allison @bronze @The_Vampire_Brigade @scathach
I draw, code, and make memes sometimes.