### Overview
After the deployment of China Chopper, there are signs of credential harvesting using **Mimikatz**.

### Details
- **Tool Used**: Mimikatz
- **Purpose**: Extracting user credentials from the compromised system.
- **Indicators**: Unauthorized access attempts, suspicious processes running on the server.

### Next Steps
Monitor for lateral movement attempts within the network, as attackers may use harvested credentials to propagate.