threat actor USES lateral movement
The threat actor was observed moving laterally within the client environment during the monitoring and discovery phases.
Explicit Confidence 99% · Andrew EP 11 Details
“We could see lateral movement”
Concept
concept:threat_actor
Also: threat act
Generic term used in the episode for an entity posing a threat to a network.
Generic term used in the episode for an entity posing a threat to a network.
“The term threat actor is just a fancy way to describe someone who poses a threat to your network”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | lateral movement | Explicit | 11 |
| outgoing | USES | exfiltration | Explicit | 11 |
| outgoing | USES | back door | Explicit | 11 |
threat actor USES lateral movement
The threat actor was observed moving laterally within the client environment during the monitoring and discovery phases.
Explicit Confidence 99% · Andrew EP 11 Details
“We could see lateral movement”
threat actor USES exfiltration
The threat actor targeted R&D systems and exfiltrated intellectual property.
Explicit Confidence 99% · Andrew EP 11 Details
“They were looking to exfiltrate and they did exfiltrate some intellectual property.”
threat actor USES back door
The investigators sought to identify the back doors the threat actor had into the environment.
Explicit Confidence 94% · Andrew EP 11 Details
“try and identify how many back doors these people have into their environment”