I'm doing an assessment on the potential outspread of Bad Rabbit in our organization. Our staff do not have admin privileges on their host machines. We have also blocked the IOCs. Am I safe to say without admin privileges, the ransomware wouldn't be able to install the fake flash update/mimikatz?
Any other pointers we need to look out for, other than the ones for WannaCry, Petya, NotPetya?