One Control, Tested
A control is only worth what it stops on a bad day. Each note takes a single control from the attack-path library and answers four questions: what it stops, what it does not stop, what it looks like when it is working, and how to prove it.
Blocking Lateral Movement through Endpoint Hardening
This security control limits lateral movement by blocking workstation RDP, preventing credential dumping from memory, and enforcing strict least privilege.
18 August 2026 · appears in 3 attack paths
Stopping Ransomware from Killing the Backups
Implement immutable, offline backups to prevent ransomware from deleting recovery points, ensuring critical business data remains recoverable after an attack.
18 August 2026 · appears in 2 attack paths