An unauthorized lateral movement attempt was detected within the network. The attackers employed Cobalt Strike to dump credentials and escalate privileges, aiming to expand access. This activity was identified through suspicious network traffic patterns.