CYBERTEQ
/ THE VISIBILITY GAP
BUSINESS AS USUAL
ILLUSTRATIVE ATTACK SCENARIO
IDENTITY
01
EM
Employee account
Finance · Workspace access
AuthenticationSuccessful
Session started02:17 AM
DeviceUnrecognized
⚠
Unfamiliar device
CLOUD ACCESS
02
AccountEM / Finance
Role changed02:19 AM
ScopeShared workspace
⚠
Elevated access
DATA TRANSFER
03
↗
Financial reports
Restricted workspace
OperationBulk download
Started02:22 AM
Outbound transfer
128 MB
⚠
Unusual download
⚠
CONNECTED ATTACK PATH
Three events.
Three separate records.
CRITICAL
Suspected data exfiltration
01 / LOGIN
02 / PRIVILEGE CHANGE
03 / DATA LOSS RISK
Illustrative scenario: an unfamiliar login, elevated access,
and an unusual download are connected to reveal a suspected attack.