Attack paths into a research biotech

Views in this map

1. 1
   All pathsEvery way in, from the internet to the crown jewels, across six weak spots.
2. 2
   Shortest pathThe five hops to cut first: a phished laptop to the research data lake.
3. 3
   After fixesThree chokepoints cut — MFA, the flat lab network, the over-privileged account.

All paths ‹ › Shortest path ‹ › After fixes

Flows to play

• ▷
  Phish to research dataA chain from a phished scientist to the research data lake, hop by hop, each step tagged with its ATT&CK tactic. In every view; in After fixes it stops at the first fixed step.

The model behind it

55 records of 8 types. Every box on the map is one of them, so the filters and the record panel read the same data.

• Assets 22
• ATT&CK techniques 8
• Weaknesses 6
• Controls 6
• Identities 5
• Teams 4
• Detections 3
• Threat actor 1

Filters

ATT&CK tactic and Exploitability: pick a value and everything else fades.