Detected lateral movement within the network. Anomalous activity observed from internal host attempting unauthorized access to multiple systems. Indicators suggest potential APT29 involvement leveraging known TTPs.