UNC6692 - Pass-The-Hash Lateral Movement (T1550.002)

Ibrahim Saud@tektrix

•updated Jun 20, 2026•0•0•11

Time-series correlation detecting Pass-The-Hash authentication behavior immediately following the extraction of LSASS memory.