# Detecting Lateral Movement through Tracking Event Logs (Version 2) Detecting Lateral Movement through Tracking Event Logs (Version 2) is an Incident Response product. It runs in the cloud. Pricing is free. A report on detecting lateral movement through tracking event logs, updated to include analysis of various tools and commands used by attackers. Checked October 2026. ## What is Detecting Lateral Movement through Tracking Event Logs (Version 2)? This report is intended for incident investigation and explains what logs are recorded and what files are created upon execution of tools/commands that are often used in lateral movement. Updated Contents: This report is intended for incident investigation and explains what logs are recorded and what files are created upon execution of tools/commands that are often used in lateral movement. While the previous report mainly focused on investigation on event logs and registry entries, this updated report also covers other types of logs and files that are created during lateral movement. The report includes analysis results of various tools and commands that are likely used by attackers in lateral movement, and provides information on how to identify and analyze these tools and commands. The report is intended for incident responders, security analysts, and other professionals who are involved in incident response and incident investigation. Tags: File Analysis, Lateral Movement, Log Management ## Where it fits in your security program (NIST CSF 2.0) - [Respond](https://cybersectools.com/guides/building-respond-program-small-team): helps you contain and handle incidents. ## Quick facts - Category: [Security Operations](https://cybersectools.com/categories/security-operations) ยท [Incident Response](https://cybersectools.com/categories/dfir) - Deployment: Cloud - Company size fit: SMB, Mid-Market, Enterprise - Pricing model: Free - Website: blogs.jpcert.or.jp ## Where it ranks No shortlist covers this product's category yet. The closest is [Best MDR Solutions for Business](https://cybersectools.com/shortlists/best-mdr-solutions). ## Detecting Lateral Movement through Tracking Event Logs (Version 2) FAQ ### What is Detecting Lateral Movement through Tracking Event Logs (Version 2)? Detecting Lateral Movement through Tracking Event Logs (Version 2) is a product in the Incident Response category. It covers File Analysis, Lateral Movement and Log Management. ### What is the pricing for Detecting Lateral Movement through Tracking Event Logs (Version 2)? Detecting Lateral Movement through Tracking Event Logs (Version 2) is free. Download and setup instructions are at https://blogs.jpcert.or.jp/en/2017/12/research-report-released-detecting-lateral-movement-through-tracking-event-logs-version-2.html. ### What are alternatives to Detecting Lateral Movement through Tracking Event Logs (Version 2)? Alternatives to Detecting Lateral Movement through Tracking Event Logs (Version 2) listed on CybersecTools: 1. [Cognni Incident Investigation](https://cybersectools.com/tools/cognni-incident-investigation) - Incident investigation tool for info risks, user activity, and file exposure. (Commercial) 2. [Amazon Detective](https://cybersectools.com/tools/amazon-detective) - A service that analyzes and visualizes security data to investigate potential security issues. (Commercial) 3. [StrangeBee TheHive IaaS Images](https://cybersectools.com/tools/thehive-strangebee) - Collaborative case management platform for incident response and investigation (Commercial) 4. [Cydarm Platform](https://cybersectools.com/tools/cydarm-platform) - SOC management platform for incident response and cyber response management (Commercial) 5. [ORNA Digital Incident Response Plan](https://cybersectools.com/tools/orna-digital-incident-response-plan) - Digital incident response plan built on SANS 504-B framework (Commercial) Compare all Detecting Lateral Movement through Tracking Event Logs (Version 2) alternatives at [https://cybersectools.com/alternatives/detecting-lateral-movement-through-tracking-event-logs-version-2](https://cybersectools.com/alternatives/detecting-lateral-movement-through-tracking-event-logs-version-2) ### What deployment and organization size does Detecting Lateral Movement through Tracking Event Logs (Version 2) fit? Detecting Lateral Movement through Tracking Event Logs (Version 2) is available as a cloud service. It is listed for small businesses, mid-market companies and enterprises. It is free. ## Compare Detecting Lateral Movement through Tracking Event Logs (Version 2) with similar solutions - [Detecting Lateral Movement through Tracking Event Logs (Version 2) vs Cognni Incident Investigation](https://cybersectools.com/compare/cognni-incident-investigation-vs-detecting-lateral-movement-through-tracking-event-logs-version-2) - [Detecting Lateral Movement through Tracking Event Logs (Version 2) vs Amazon Detective](https://cybersectools.com/compare/amazon-detective-vs-detecting-lateral-movement-through-tracking-event-logs-version-2) - [Detecting Lateral Movement through Tracking Event Logs (Version 2) vs StrangeBee TheHive IaaS Images](https://cybersectools.com/compare/detecting-lateral-movement-through-tracking-event-logs-version-2-vs-thehive-strangebee) All alternatives to Detecting Lateral Movement through Tracking Event Logs (Version 2): [/alternatives/detecting-lateral-movement-through-tracking-event-logs-version-2](https://cybersectools.com/alternatives/detecting-lateral-movement-through-tracking-event-logs-version-2) --- Source: https://cybersectools.com/tools/detecting-lateral-movement-through-tracking-event-logs-version-2 For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL). More on Detecting Lateral Movement through Tracking Event Logs (Version 2): funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md