Loading content
Initial access spreads across network and trust boundaries.
Use this profile to understand the building block briefly, place it in the model, and open related building blocks.
Theoretical construct: explains a term, principle, or mental model.
Concrete cog in the system that works inside larger relationships.
Lateral movement is an attacker’s spread from a compromised system to additional accounts, hosts, or services inside an environment.
The term comes from cybersecurity and describes a common phase after initial access: attackers use existing trust relationships and permissions to traverse a target network.
Picture an intruder moving from room to room in a building. Each extra key and open connection expands the area they can reach.
A compromised foothold is used for additional access.
Segmentation, least privilege, and telemetry limit spread.
Detection focuses on unusual logins, remote services, and privilege changes.
Understanding lateral movement improves segmentation and incident response.
Where this building block is located in the topic model.
No structure path available.
Explore how this building block connects to concepts, methods, technologies, and tools.
All direct connections of the current building block in a compact text view.
This classification shows where the building block typically matters, how demanding it is, and what kind of impact it has in the model.
The level within the organization (enterprise, domain, team) at which the AssetBlock is applied.