Credential theft & Active Directory: How to stop attackers from moving laterally within your network