Can you detect lateral movement in encrypted traffic?
Largely, yes: who connects to whom, on which port, when and how much data moves are all visible without decryption. What stays hidden is the content of the session, such as the commands sent over an encrypted remote session.
This answer also appears, with more context, here: Lateral movement and C2 beaconing