At 47%, the first hit came back.

The command and control server. Live, right now. Whoever was on the other end of that connection was probably scrolling through Karen's network shares, looking for the HR salary spreadsheet or the CFO's email archive.

The progress bar crawled: 5%... 12%... 34%.

"Show me what else you're hiding," she whispered.

WE_ARE_STILL_HERE WE_ARE_STILL_HERE WE_ARE_STILL_HERE

She slammed the incident response playbook open. "Containment first."