## Context
Post-backdoor installation, APT29 seems to be executing lateral movement strategies to broaden their access within the network.

## Key Findings
- **Movement Patterns**: Use of legitimate administrative tools has been observed to facilitate lateral movement while minimizing detection.
- **Target Expansion**: Systems with sensitive data storage have been prioritized in these lateral movement activities.

## Next Steps
- Implement network segmentation to contain potential lateral movement.
- Enhance monitoring of administrative tool usage across the environment.