The GDID: Your Device Has a Memory. So Does the Provider.
An April 2026 FBI affidavit in a federal case against an alleged Scattered Spider member described a persistent Microsoft device identifier and the records kept against it. This brief asks what that provider-held record contains, who can reach it and by what route, and what it means for principals whose conduct is lawful. Built from the sworn complaint and affidavit and FBI public advisories. For security teams running Windows for sensitive work.
COMMAND intelligence
Unlock this Command Brief.
Get this assessment, the full subscription collection, and new intelligence as it is published.
Introductory rate · through 30 November
$75/month
For your first year, then $100/month. Or $750 for the first year, then $1,000 annually.
- The CORGI Morning Brief, each morning
- This brief and the subscription collection, 100+ briefs
- New Command Briefs as they are released
- Principal and Analyst briefs, as PDF
Secure checkout through Substack. Substack asks for your email first.
Topics
Mobile & DevicesMonitoring & AlertingPublic RecordsExecutive Protection