Lateral Movement skills

Hunting for DCOM Lateral Movement

mukul975

Detect DCOM abuse for enhanced cybersecurity.

M

Moving Laterally with NetExec

mukul975

Streamline lateral movement during penetration tests.

Configuring Microsegmentation for Zero Trust

mukul975

Streamline your network security with microsegmentation.

Detecting Lateral Movement in Network

mukul975

Identify lateral movement techniques in enterprise networks.

Network Segmentation Implementation

mukul975

Secure your network with effective segmentation strategies.

Detecting Attacks on Historian Servers

mukul975

Monitor and secure OT historian servers from cyber threats.

Containing Active Breaches

mukul975

Contain active threats and prevent lateral movement effectively.

Detecting Lateral Movement with Splunk

mukul975

Hunt for adversary lateral movement using Splunk.

SIEM Correlation Rules for APT

mukul975

Detect advanced persistent threats with multi-event correlation.

Conducting Pass-the-Ticket Attack

mukul975

Execute lateral movement using stolen Kerberos tickets.

Detecting Azure Lateral Movement

mukul975

Identify and respond to lateral movement in Azure environments.

Hunting for Lateral Movement via WMI

mukul975

Detect WMI-based lateral movement in Windows environments.

Investigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths.

Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify SMB file transfers, NTLM account spray activity, remote service execution, and anomalous internal connections.

Execute an internal network penetration test simulating an insider threat or post-breach attacker to identify lateral movement paths, privilege escalation vectors, and sensitive data exposure within the corporate network.