Fluency Security's Lateral Movement workflow is a detection capability within the Fluency platform that identifies lateral movement activity across network infrastructure. The workflow monitors network traffic, authentication events, and system access patterns using AI-based analysis. It examines user behavior, network connections, and privilege changes to surface suspicious activity that may indicate an attacker traversing internal systems. Key detection capabilities include: - Monitoring network connections and authentication events - Analyzing user privilege escalation patterns - Detecting unusual access to sensitive systems - Identifying suspicious network traversal patterns - Correlating events across multiple systems and timeframes - Providing context on potential attack progression The workflow is designed to surface indicators associated with advanced persistent threats (APTs) and compromised credentials moving laterally through an environment.