Deeper analysis of these figures in Vectra's 2018 Attacker Behavior Industry Report shows the different stages of the attackers' kill chain found within different vertical industry sectors. Overall, 37% of detections denote C&C activity, 31% denote reconnaissance activity, 24% denote lateral movement, and 6% actual exfiltration attempts.

Read the article