Updated 2026-09-19
Parses Zeek logs to identify SMB file transfers, NTLM account spray, remote service execution, and anomalous internal connections.
Browse skills that share this capability.
Updated 2026-09-19
Parses Zeek logs to identify SMB file transfers, NTLM account spray, remote service execution, and anomalous internal connections.
Updated 2026-09-19
Analyze Zeek network logs to detect lateral movement including SMB share access, DCE/RPC service execution, and NTLM account spray.