#lateral-movement

2 posts

Cloud Lateral Movement: The Techniques Your SOC Keeps Missing

Lateral movement moved to the cloud control plane. Each hop is individually authorized, so single-event rules miss the chain.

May 30, 2026 · 16 min read

#cloud #lateral-movement #sigma #detection-program

threat intel advanced T1078

Identity-First Attacks: The Kill Chain Defends Five Stages the Attacker Skips

The 2011 kill chain trains you to stop malware at the perimeter. Identity-first attackers skip five of its seven links and log in. What to defend instead.

May 15, 2026 · 14 min read

#identity #threat-landscape #cloud #lateral-movement