How do security teams actually detect lateral movement in a local network and what tools should I be looking at as a beginner
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
How do security teams actually detect lateral movement in a local network and what tools should I be looking at as a beginner
1 real search · 1 real-search pass
defensive lateral movement detection tools Sysmon Zeek Wazuh Microsoft Defender MITRE ATT&CK detection guidanceGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 1 queries…
Searches and sources
ChatGPT1 real searches · gpt-6
defensive lateral movement detection tools Sysmon Zeek Wazuh Microsoft Defender MITRE ATT&CK detection guidance Google ↗
- Download Sysmon · learn.microsoft.com
- Official Zeek website · zeek.org
- Official Wazuh website · wazuh.com
- Official Suricata website · suricata.io
- Official Security Onion website · securityonion.net
- Official Splunk website · splunk.com
- Deploy Sensors · info.mitre-engenuity.org
- Getting Started with ATT&CK · mitre.org
- Inside Microsoft 365 Defender: Attack modeling for finding and stopping lateral movement · microsoft.com
- Lateral Movement, Tactic TA0008 - Enterprise · attack.mitre.org
- Detection Strategies · attack.mitre.org
- Wazuh documentation · documentation.wazuh.com
- Zeek documentation · docs.zeek.org
- Microsoft Sysinternals · learn.microsoft.com
- Wireshark documentation · wireshark.org