Terme informatique

Lateral Movement

The movement of an attacker from a compromised machine or account to other network resources.

View my favorites

Simple definition

The movement of an attacker from a compromised machine or account to other network resources.

Technical definition

Le lateral movement uses IDs, sessions, administration protocols or trust relationships to expand access to the information system.

What is it used for ?

Understand why segmentation and limitation of privileges are essential after a first compromise.

Practical example

A local administrator account reused on multiple positions can allow an attacker to switch from one machine to another.

Common issues

  • Identical local passwords
  • Too flat network
  • Preferred accounts used on standard items

Windows LAPS · VLAN · Myth of privilege

Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.

♡ 0