Simple definition
The movement of an attacker from a compromised machine or account to other network resources.
Technical definition
Le lateral movement uses IDs, sessions, administration protocols or trust relationships to expand access to the information system.
What is it used for ?
Understand why segmentation and limitation of privileges are essential after a first compromise.
Practical example
A local administrator account reused on multiple positions can allow an attacker to switch from one machine to another.
Common issues
- Identical local passwords
- Too flat network
- Preferred accounts used on standard items
Related terms
Windows LAPS · VLAN · Myth of privilege
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.