Attack paths

A path is a chain from a foothold to something that matters. Fix the hop that breaks the chain, then verify it.

Attack paths
Impact	Path	Environment	State	Run
Domain Admin	Finance jump to directory replication	Corporate	Open path	PT-1842
Payroll files	The same service account reads payroll	Corporate	Open path	PT-1842
Domain Admin	Breached password is still Domain Admin	Corporate	Open path	PT-1828
Organization deploy	Build log key can deploy across the organization	AWS	Open path	PT-1811
Plant PLC	Engineering workstation to the cell HMI	Plant floor	Open path	PT-1802
Appliance shell	Internet to the edge appliance	Production edge	Open path	PT-1836
Vendor banking	Vendor login to another supplier's bank account	Production edge	Open path	PT-1836

A path is a chain from a foothold to something that matters. Fix the hop that breaks the chain, then verify it.

Attack paths
Impact	Path	Environment	State	Run
Domain Admin	Finance jump to directory replication	Corporate	Open path	PT-1842
Payroll files	The same service account reads payroll	Corporate	Open path	PT-1842
Domain Admin	Breached password is still Domain Admin	Corporate	Open path	PT-1828
Organization deploy	Build log key can deploy across the organization	AWS	Open path	PT-1811
Plant PLC	Engineering workstation to the cell HMI	Plant floor	Open path	PT-1802
Appliance shell	Internet to the edge appliance	Production edge	Open path	PT-1836
Vendor banking	Vendor login to another supplier's bank account	Production edge	Open path	PT-1836