# Lateral Movement Analysis

## Context:
With persistence established, Kimsuky actors focus on expanding their reach within the targeted network.

## How It Works:
- **Shared Drive Access**: The attackers exploit shared network drives to spread their influence, accessing sensitive files and installing malware on additional systems.
- **Techniques**: This often involves exploiting weak passwords or leveraging stolen credentials to navigate shared resources.

Monitoring access logs and unusual activity on shared drives can help identify signs of lateral movement.