### Overview
Credential harvesting has been detected utilizing Mimikatz, a known tool for extracting account credentials from compromised systems.

### Key Indicators
- **Unauthorized Access Attempts**: Multiple failed and successful login attempts from unusual locations.
- **Privileged Account Targeting**: Specific focus on accounts with elevated privileges.

### Recommendations
- **Account Lockdowns**: Immediately lockdown and reset passwords for compromised accounts.
- **Multi-Factor Authentication**: Implement MFA to secure access to critical systems.

### Next Steps
Prepare for potential lateral movement within the network as the attacker leverages harvested credentials to propagate. Enhance monitoring for unusual internal network activity.