ConceptsLateral Movement Hunts

Lateral Movement Hunts

Threat hunts focused on finding attacker movement between systems inside a network, searching for signs of remote access, credential reuse, and pivoting that indicate an intruder spreading from an initial foothold.

Glossary definition

8 direct links1 lesson

Concept Neighborhood

Prerequisite · arrow shows the orderRelated · bigger circles cover more lessons

Start here

Hunt Hypothesis

The foundation Lateral Movement Hunts builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Hunt HypothesisStart here

A specific, testable statement of what malicious activity might be present and how it would show up in data, that drives a threat hunt, giving it a clear question to investigate rather than aimless searching.

lessons

Relatedsorted by lesson coverage

Pass-the-Hash Detection

lessons

Lateral Movement

lessons

Credential Access Hunts

lesson

Foothold

lesson

Initial Access Hunts

lesson

Persistence Hunts

lesson

Show 1 more connection

Privilege Escalation Hunts

lesson

Related Lessons

1 lesson covers this concept

Use Intelligence and ATT&CK Carefully

SOC Analyst