In vRealize Network Insight, you can perform crown jewel analysis to identify possible lateral movement opportunities for an adversary based on existing flow paths between various entities in your network.
You can choose to add your most critical VMs and physical IPs as crown jewels. After you add crown jewels in vRealize Network Insight, you can analyze and view existing flow related information, relationships between the entities based on flows, number of entities directly connected to your crown jewels, total incoming traffic flow to your crown jewels, and so on.