domains / families / security / windows-lateral-movement

windows-lateral-movement

separate

Windows lateral movement playbook. Use when pivoting between Windows hosts via PsExec, WMI, WinRM, DCOM, RDP, pass-the-hash, overpass-the-hash, or pass-the-ticket techniques.

When to use

• pivoting between Windows hosts
• PsExec lateral movement
• WMI lateral movement
• WinRM lateral movement
• DCOM lateral movement
• RDP lateral movement
• pass-the-hash
• overpass-the-hash

Skill page

Source