Containment - 1

security: Containing a domain compromise: How predictive shielding shut down lateral movement

Microsoft describes a real-world domain compromise where exposure-based containment and predictive shielding were used to slow lateral movement, stop credential abuse, and interrupt the attacker’s progress.