Anomalous network traffic indicative of credential dumping was detected. An unauthorized user is attempting to extract authentication details, likely to facilitate lateral movement within the network.