Network lateral movement refers to the techniques cyber attackers use to move within a compromised network after gaining initial access. Instead of attacking just one system, attackers explore connected devices and systems, seeking sensitive data, credentials, or higher privileges. This movement helps them avoid detection, escalate their access, and reach valuable targets, such as databases or critical infrastructure, before launching further attacks or stealing information. Detecting and stopping lateral movement is crucial for limiting the impact of a breach.