Posts tagged "lateral-movement"

• Lateral movement and Amcache: ProgramId pivoting across hosts

  One suspicious ProgramId or Hash on host A becomes a query against every other host's Amcache. The playbook for scoping the spread across the estate.

  2026-05-24