Ravi Sir's Cyber Security Cards › Interview Cards
Explain lateral movement as a defender.
Explain lateral movement as a defender. Lateral movement is jumping from one machine to others using stolen credentials or remote admin tools. Signs: unusual SMB/RDP/WinRM logins between workstations, or sudden admin use on many hosts. “I watch for workstation-to-workstation admin logins and odd ser
Read card text
What this card says
Short answer
Lateral movement is jumping from one machine to others using stolen credentials or remote admin tools.
Example
Signs: unusual SMB/RDP/WinRM logins between workstations, or sudden admin use on many hosts.
Say it in the interview
“I watch for workstation-to-workstation admin logins and odd service creation.”
Why it matters
Catching lateral movement stops one foothold from becoming a full breach.
Learn more in the lesson: 47.4 SOC Analyst Round – SIEM, Triage, MITRE