Detecting AD Lateral Movement
$ tldr TryHackMe · Walkthrough · Medium
Description
Learn to detect SMB, PsExec, and RDP lateral movement through Windows Event Logs and Splunk.This room requires a TryHackMe subscription (VIP) to access the lab. The official page will tell you if your plan covers it.