As cited
Copy frozen at (site build).
Hunting for Lateral Movement using Event Query Language
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
research
Hunting for Lateral Movement using Event Query Language
Elastic Security released a technical guide on detecting lateral movement techniques using Event Query Language (EQL). The article covers detection methods for file transfers via SMB, scheduled task creation, remote registry modifications, and tools like SharpRDP, showing how to correlate events from both source and target hosts to identify adversary pivoting activity.
Why it matters: Security operations teams and threat hunters using Elastic Security need these EQL correlation patterns to detect lateral movement in their environments before attackers reach high-value targets.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
research
Hunting for Lateral Movement using Event Query Language
Elastic Security released a technical guide on detecting lateral movement techniques using Event Query Language (EQL). The article covers detection methods for file transfers via SMB, scheduled task creation, remote registry modifications, and tools like SharpRDP, showing how to correlate events from both source and target hosts to identify adversary pivoting activity.
Why it matters: Security operations teams and threat hunters using Elastic Security need these EQL correlation patterns to detect lateral movement in their environments before attackers reach high-value targets.
- Source published
- First seen by Cybersecurity Tracker