Lateral Tool Transfer| attack.mitre.org
A survey of attacker files reveals orchestration techniques & preferred exploits| Sophos News
Netwalker| attack.mitre.org