Upon the discovery of user account credentials, SSM will automatically attempt to validate those credentials and determine where they are most useful. This is a common process executed by both malicious attackers and penetration testers and is performed during privilege escalation.

Using a valid set of credentials, SSM will attempt to identify valuable areas within your environment. This is conducted through a variety of methods, including the use of advanced tools which assists in identifying where sensitive targets are.

Critical data leaving your environment is an extremely serious concern. If access to confidential and/or sensitive data can be attained, SSM will simulate and log this activity to help your IT Security Staff tighten areas that should restrict data exfiltration.

With elevated access, SSM will attempt to upload malicious code onto remote systems in an attempt to test the environment’s end-point anti-malware controls.

Detailed reporting and deliverables will allow us to cross-reference our activities with monitoring and alerting controls, auto-create tickets for our Security Team and address vulnerabilities in near real time.