AI Tradecraft - Impacket Lateral Movement Post-LLM (T1563.002)
Identifies LLM API interaction followed shortly by the execution of Impacket tools (wmiexec.py, smbexec.py), simulating attackers using AI to formulate lateral movement commands.
Microsoft Sentinel (KQL)

