Lateral movement describes a common cyberattack technique where intruders, having gained initial access to a network, move through the system “sideways” (or “east-west”), looking to escalate their privileges to access high-value targets. In the event the attacker can secure admin privileges, lateral movement can be tough to detect because the activity appears normal to security professionals and tools.