Phases of a Post-Intrusion Ransomware Attack

After establishing a foothold in a network, threat actors attempt to discover additional info by harvesting credentials, escalating privileges, scanning and enumerating the network and gathering data.