Threat Hunting -- Lateral Movement

Lateral Movement Hunt Pack

Hunt queries for every major lateral movement technique beyond Kerberos and SMB. Each technique includes required audit policy, SPL and KQL queries, what normal traffic looks like, and the specific pattern that indicates malicious use.