Lateral movement detection (based on "special groups" feature)

Detects scenarios where a user of a predefined set of group(s) logs on a target machine.