Detecting Lateral Movement through Tracking Event Logs: https://www.jpcert.or.jp/english/pub/sr/20170612ac-ir_research_en.pdf