# Lateral Movement Tactics Observed

## Overview
Evidence indicates that APT17 has begun lateral movement within the network, potentially targeting additional systems and sensitive data.

## Tactics Identified
- **Credential Dumping**: Use of credential harvesting techniques to access additional systems.
- **Remote Desktop Protocol (RDP)**: Unauthorized RDP sessions observed, indicating an attempt to expand access.

## Recommendations
- Implement network segmentation to limit lateral movement.
- Enforce multi-factor authentication to protect against credential misuse.