Dropbox researchers develop tool to detect lateral movement attacks against enterprise networks

The tool uses two key components: a causality engine that traces login paths and a scoring algorithm that decides which login paths have the characteristics of lateral movement attacks.