explainx.ainewsletter3.4k
tag

ntlm-spray▌

1 indexed skills · max 10 per page

skills (1)

detecting-lateral-movement-with-zeek

mukul975/Anthropic-Cybersecurity-Skills · detecting-lateral-movement-with-zeek

0

Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify SMB file transfers, NTLM account spray activity, remote service execution, and anomalous internal connections.