The technique attackers use to move through a network after an initial compromise, seeking access to additional systems and data.
Detecting lateral movement is a core SOC responsibility — the initial breach point often isn't the real target, just the entry point toward it.
