Did the Red Team do it?

What Evidence do you have that it was the Red Team?
List of IOCs, TTPs, etc.