Description

Lateral Movement refers to the process of moving within a target environment, from one system to another, in order to achieve an adversary's objectives. In a cyber security red team context, lateral movement is a critical aspect of the adversary lifecycle as it allows the attacker to gain access to additional resources and systems within the network. This process often involves the use of various techniques such as compromising legitimate credentials, installing remote access tools, and using native network and operating system tools. The objective of lateral movement is to gain access to and control over remote systems, which can then be leveraged to achieve the attacker's ultimate goals, such as data theft or disruption of critical systems. Lateral movement requires careful planning and execution in order to remain undetected and maintain access to the target environment.