Home Evidence of Lateral Movement
Post
Cancel

Evidence of Lateral Movement

Posted Sep 11, 2022
By darkcybe
1 min read

Techniques that can be used to discover evidence in support of lateral movement through a network using various techniques.

Windows

Remote Desktop Protocol (RDP) Usage

Track RDP logins between remote machines

Darkcybe - Evidence Account Usage

DFIR, Evidence Artifacts
rdp port:3389 evtx:security lateral movement (TA0008)
This post is licensed under CC BY 4.0 by the author.
Recently Updated
Contents