Stepping stone detection can be defined as a process to discover an intermediate host correlation that used by intruder.Most of the intruders cover their track by login into intermediate host first beforeexecute the real attack .This intermediate hosts host here known as stepping stone.This paper introduces a hybrid stepping stone detection method which combines the network-based and host -based stepping stone method,sloid stepping stone detection architecture has been produced.A great explanation regarding to the architecture has been done,together with the details oh the of each chosen approach as to developthe overall hybrid stepping stone detection method.The study shows that by applying the hybrid concept in stepping stone detection,benefits can be gained from the less numberof false positive and false negative rates,robust against active perturbation and the overall stepping stone methods become more precise.