Enterprise Attack Path & Lateral Movement Estimator
Pillar 13 • Breach Path EngineSimulates realistic multi-hop breach paths from Patient Zero workstation to Active Directory and Crown Jewels. Quantifies financial blast radius and validates choke-point mitigations.
Estimated Financial Exposure
$8,730,000
Unmitigated critical exposure
Quantified Blast Radius
94.5 / 100
Multi-subnet catastrophic spread
Time to Crown Jewels
14.8 mins
Automated lateral spread speed
Target Crown Jewel
Asset Value: $48,500,000
Lateral Movement Kill Chain: WannaCry.exe → SWIFT Transaction Gateway & Oracle Core Banking DB
Step-by-step adversary pivot chain combining binary capabilities with active network topology.
1
+0.5 min
Patient Zero InfiltrationT1204 / T1036
Target: CORP-WS-8491 (Finance Analyst) • Corp User VLAN (10.10.20.0/24)
Technique: Initial Execution / Masquerading
Compromise Probability:
100%
COMPROMISED
2
+1.8 min
Local Privilege EscalationT1068 / T1134
Target: CORP-WS-8491 (SYSTEM Privileges) • Host Local Security Authority
Technique: UAC Bypass / Access Token Impersonation
Compromise Probability:
94%
COMPROMISED
3
+3.2 min
Credential Harvesting (LSASS)T1555.003
Target: Local SAM Database & Memory Cache • LSASS.exe Process Memory
Technique: Credentials from Web Browsers
Compromise Probability:
82%
COMPROMISED
4
+4.5 min
Lateral Movement & WormingT1210
Target: Subnet-Wide SMB Broadcast • Server Farm DMZ (10.10.100.0/24)
Technique: SMBv1 MS17-010 EternalBlue Worm
Compromise Probability:
96%
COMPROMISED
5
+11.4 min
Active Directory Domain EscalationT1558.003 / T1003.006
Target: PRIMARY-DC-01 (Active Directory) • Identity Core (10.10.5.0/24)
Technique: Kerberoasting & DCSync Replication
Compromise Probability:
89%
COMPROMISED
6
+14.8 min
Crown Jewels Exfiltration / EncryptionT1486
Target: SWIFT Transaction Gateway & Oracle Core Banking DB • Secure Data Vault (10.10.1.0/24)
Technique: Data Encrypted for Impact (Ransomware)
Compromise Probability:
92%
COMPROMISED