Post-exploitation
What a tester or attacker does after gaining initial access: gathering credentials, escalating, and moving toward the objective.
Initial access is rarely the interesting part. Post-exploitation is where the real impact is established: harvesting credentials from memory, finding accessible data, and pivoting toward higher-value systems.
For a report, this phase produces the findings that change decisions, because it demonstrates what a single compromised laptop actually leads to in your environment.
Where this comes up
Post-exploitation sits inside our penetration testing work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.