## Summary
Lateral movement has been detected with the use of credential dumping tools and SMB exploitation.

## Technical Details
- **Tools Used:** Mimikatz for credential harvesting
- **Exploitation Method:** SMB vulnerability (CVE-2021-34527)

## Next Steps
Attention must now focus on data exfiltration signs, particularly monitoring outbound network traffic for anomalies.