A credential dumping activity was detected originating from a potentially compromised host within the network. The adversary is attempting to obtain credentials to facilitate lateral movement across the critical infrastructure network. Immediate action is required.