### Overview
After establishing persistence, Careto focuses on credential dumping to move laterally within the network.

### Key Findings
- **Tools Employed**: Utilizes open-source tools like Mimikatz for credential extraction.
- **Lateral Movement**: Exploits valid accounts to access additional network resources.

### Next Steps
Examine the methods used for data exfiltration, particularly how Careto uses encrypted channels to avoid detection.