Detection of suspicious network traffic indicating credential dumping activity by Kimsuky APT group. The attacker utilized a known credential dumping tool to exfiltrate credentials from the compromised host 192.168.1.15, targeting additional systems for lateral movement.