netbiosXπ’ New Article: Lateral Movement via Microsoft Speech
ποΈ Microsoft Speech Platform is built-in in Windows environments to enable Speech recognition, Voice input, Text-to-Speech & Speech features in Windows, Edge & Office
π¦ Deepβdive playbook on how Microsoft Speech can be abused for lateral movement and how defenders can perform detection.
π 1x Playbook
π‘ Detection Opportunities
πΉ 1x MDE Query
πππππππ’π¨π§ - ππ―ππ§π ππ'π¬
β
οΈ 4657 & 4663 - {655D9BF9-3876-43D0-B6E8-C83C1224154C}
β
οΈ 4688 - SpeechRuntime.exe
β
οΈ 7040 & 7036 - RemoteRegistry Service
βοΈ https://ipurple.team/2026/04/07/microsoft-speech/ #purpleteam #blueteam #detectionengineering
