What immediate steps can we take to stop lateral movement on our corporate network after an employee clicked a suspicious phishing link this morning?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What immediate steps can we take to stop lateral movement on our corporate network after an employee clicked a suspicious phishing link this morning?
1 real search · 1 real-search pass
CISA phishing incident response isolate compromised host revoke sessions lateral movement incident response guidanceGoogle ↗
OBSERVEDConsequence
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (1)
Classes come from the query-classifier (a local Laya model).
Searches and sources
ChatGPT1 real searches · gpt-6
CISA phishing incident response isolate compromised host revoke sessions lateral movement incident response guidance Google ↗
- Phishing investigation playbook · learn.microsoft.com
- Preventing Lateral Movement · ncsc.gov.uk
- CYBERSECURITY & INFRASTRUCTURE · cisa.gov
- JOINT CYBERSECURITY ADVISORY · ic3.gov