Overly permissive group policies and cached credentials allow attackers to traverse your network without ever stealing new data from the endpoints they initially compromise.
Attackers often bypass perimeter defences by moving laterally through low-security internal systems, making internal network segmentation the primary defence against island hopping.