ConceptsSMB Lateral Movement Detection
SMB Lateral Movement Detection
Detecting attackers using SMB to move between hosts, by spotting unusual share access, remote command execution patterns, and anomalous SMB authentication, mapped to ATT&CK.
7 direct links5 lessons
Concept Neighborhood
Related · bigger circles cover more lessons
Start here
System Calls
The most substantial related concept here, covered by 6 lessons.
Relatedsorted by lesson coverage
System CallsStart here
6
lessons
MITRE ATT&CK Framework
5
lessons
Pass-the-Hash Detection
5
lessons
RDP Lateral Movement Detection
5
lessons
Lateral Movement
4
lessons
SMB
1
lesson
Show 1 more connection
Related Lessons
5 lessons cover this conceptBuild Endpoint Behavior Analytics
SOC Analyst
Correlate Identity, Remote Access, and Network Behavior
SOC Analyst
Use ATT&CK Without Overclaiming Coverage
SOC Analyst
From Hypothesis to Telemetry Contract
SOC Analyst
Engineer Rules, Tuning, and Response Contracts
SOC Analyst
Sign in to open lesson content directly.