ATT&CK coverage
Color is the worst result in this scope. Green was stopped. Amber was only detected. Red was neither. Gray has not been tested.
Initial Access
Execution
Persistence
Privilege Escalation
Credential Access
Lateral Movement
Collection
T1003.006 DCSync
Not prevented or detected- svc-backup can replicate the directoryNot prevented · Not detected
All environments. PowerShell and remote desktop are listed so the gaps in the test plan stay visible.