Choose your next move between Windows hosts.
Guides movement between Windows hosts by matching available credentials, stealth needs, and target restrictions to remote-access methods.
When to use it
Use when pivoting between Windows hosts through remote execution or hash- and ticket-based authentication.
It changes how the agent selects and explains Windows lateral-movement methods according to available credentials and target conditions.
The playbook targets hosts running Windows; this requirement concerns the target hosts.
The lateral-movement decision tree starts with existing credentials: a plaintext password, NTLM hash, Kerberos ticket, or AES key, used as alternatives.
No additional actions listed.