DCO
Dashboard
Alerts
Hunt
Intel
Incidents
Agent
Elastic Agent
Lateral Movement
Same user/IP authenticating to multiple hosts in 24 hours
Scanning for lateral movement...