Anomalous increase in network traffic detected originating from internal workstation 192.168.1.45 to multiple endpoints within the network. The traffic involves SMB protocol usage consistent with lateral movement techniques aimed at propagating Shamoon malware. The connection was initiated using stolen credentials associated with user jdoe. A known malicious file hash was identified in the traffic.