Chapter 06 of 08 · The Attacker's Playbook

Lateral Movement

One compromised laptop is not one compromised laptop. It is a place to stand while reaching for the next machine, and the next, until the attacker holds the whole network. Lateral movement is why a small foothold becomes an organisation-wide emergency.