SMB Lateral Movement Hunt

SMB is the most common lateral movement protocol in Indian enterprise environments. This hunt distinguishes malicious SMB lateral movement from legitimate file sharing by focusing on admin shares, workstation-to-workstation patterns, PsExec artefacts, and named pipe anomalies.