## Overview

Lateral movement activities have been identified, indicating the adversary's intent to expand their presence within the network.

## Observed Tactics
- **Technique**: Pass-the-Hash
- **Targeted Systems**: File servers and domain controllers

## Recommendations
- Implement SMB signing and limit NTLM use.
- Monitor network traffic for anomalous patterns.

## Next Steps
Prepare for potential data exfiltration efforts, focusing on monitoring unusual data transfer channels.