A large organization's security operations center $($SOC$)$ noticed in its Extended.Detection and Response $($XDR$)$ antivirus software that a phished email gained access to the company ticketing system, then to the virtual private network $($VPN$)$ software, and lastly, to the company's file share. What did the SOC find?

Threat actor

Hacktivist

Threat vector

Service disruption