UBA - Lateral Movement

Hi Team,

Please share the UC logic for Lateral Movement - Domain Credentials and Local Credentials from UBA.

We are getting multiple FP alerts from these UC and would like to verify the logic written in this rules.

Thanks,
Natraj. R