Footing¶

A first foothold is a phished workstation, a jump host with a second network card, a leaked CI token, an unprivileged login. None of them is yet leverage. What each is worth is fixed the moment access arrives: what it holds, how far it reaches, and what it costs to use before anyone notices. Most of it can be read from the position already held.

Look at what is there first. Looking costs less than pressing.