What are your first three steps when you detect potential lateral movement within a corporate network?
