> For the complete documentation index, see [llms.txt](https://windows.dfirhandbook.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://windows.dfirhandbook.com/windows-dfir-and-mittr/lateral-movement.md).

# Lateral Movement

* T1021: Remote Services
* T1550: Use Alternate Authentication Material
* T1210: Exploitation of Remote Services
* T1097: Pass the Ticket
* T1091: Replication Through Removable Media
* T1080: Taint Shared Content
* T1076: Remote Desktop Protocol
* T1570: Lateral Tool Transfer