Lateral Movement

• T1021: Remote Services

• T1550: Use Alternate Authentication Material

• T1210: Exploitation of Remote Services

• T1097: Pass the Ticket

• T1091: Replication Through Removable Media

• T1080: Taint Shared Content

• T1076: Remote Desktop Protocol

• T1570: Lateral Tool Transfer