{"slug":"detecting-azure-lateral-movement","source_name":"detecting-azure-lateral-movement","name":"Detecting Azure Lateral Movement","description":"Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, token theft, and cross-tenant pivoting.","version":1,"lift":{"pass_rate_delta_pts":16.67,"pass_rate_pct":25,"total_cases":24,"passed_cases":6,"tokens_delta_pct":7.4,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T01:57:35.808799+00:00"},"skill_score":0.25,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":16.67,"with_pass_pct":25,"without_pass_pct":8.3,"tokens_delta_pct":7.4,"turns_delta_pct":0,"total_cases":24,"cases_aggregated":24,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-28T01:57:35.808799+00:00","run_id":"3859d038-d4b9-46c8-911f-8835a84047f3","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"2f49d2b9e7cd97dceedefdf62b8ce2776be26b76c68d051a03f9ddd9de0f8bfb","raw_url":"https://app.decimal.ai/s/detecting-azure-lateral-movement/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/detecting-azure-lateral-movement"}