Posts tagged "lateral-movement"

• Lateral movement and Amcache: ProgramId pivoting across hosts

  A single suspicious ProgramId on one host becomes a query you can run against every other host's Amcache. The full lateral-movement scoping playbook with concrete queries.

  2026-05-24