Assume Breach

This attack path should not be possible

Assume one employee gets hacked. Now what?

After 150+ pentests and thousands of hours inside internal networks, I’ve realized that after an employee or endpoint is compromised, post-compromise risk comes down to three questions.