From designation to attack. Operational chain of Russian peculiar Services

Russian services combine agentry and reflection with cyber operations, commercial data and network of intermediaries and contractors recruited for circumstantial tasks. In this way, they build multi-stage operations involving mark recognition, backing and logistics, followed by sabotage, disinformation activities or attacks on circumstantial individuals. What does this mechanics look like, and how do the various links let Russia to operate outside the country?