### Overview
With persistence established, the attackers began lateral movement to identify and access critical systems.

### Details
- **Tactics:**
  - Systematically scanned the network for vulnerabilities.
  - Accessed privileged systems to map out security protocols.

### Indicators of Compromise (IoCs)
- Network scanning activities.
- Access logs showing connections to sensitive systems.

### Recommendations
- Implement network segmentation to limit lateral movement.
- Enhance monitoring for unusual internal traffic.