### Overview
Following the establishment of persistence, the threat actor is now attempting lateral movement across the network, primarily through credential dumping.

### Techniques Observed
- **Mimikatz Usage**: Extraction of credentials from memory.
- **Pass-the-Hash**: Using hashed credentials to authenticate.

### Impact
This activity poses a significant risk as it can lead to further breaches within the network.

### Mitigation
Implement enhanced logging and monitoring of authentication processes. Prepare for potential data exfiltration attempts.