[drakenot]

How can you tell that you were breached?

[walterbell]

Presence of one or more: unexpected outbound traffic observed via Ethernet, increased battery consumption, interactive response glitching, display anomalies ... and their absence after hard reset key sequence to evict non-persistent malware. Then log review.

[amazingman]

What are examples of logs that you're considering IOCs? The picture you are painting is basically that most everyone is already compromised most of the time, which is ... hard to swallow.

[acdha]

How did you link that traffic to malicious activity?

[nickburns]

To where?

[meindnoch]

LOL. Aren't you a little paranoid?