Understanding how attackers can move through an environment after gaining initial access is key to protecting critical assets, security experts say.