// GLOSSARY

Lateral Movement

The attacker advancing from the first position reached toward the critical target through side steps on the network or identity plane. The Assumed Breach Simulation (RT-3) aims precisely to prove this chain: initial access is taken as given, and the real question becomes not 'how do you get in' but 'once inside, how far can you travel toward the critical target'. This emphasis rests on the anatomy of modern breaches; the real harm often accumulates not at the moment of initial access but across the quiet advance that follows. The attacker gathers credentials from a seized endpoint, moves to neighboring systems, escalates privilege and approaches the critical target step by step; MITRE ATT&CK classifies these behaviors at the tactic and technique level. Microsegmentation and narrowing effective permissions exist to make this movement harder; the test's job is to show that those controls hold not on paper but in traffic, and to measure a control's worth by where it stops the attacker. 'Yatay geçiş' is preferred in Turkish copy, with the established technical form named in parentheses.