Converting position into value¶

Realising value means turning an established position into a useful operational outcome. This may involve exfiltrating data, reading local state in place, disrupting operations, or altering system behaviour. Data egress is often among the highest-visibility actions available, whereas inspecting local configurations and system state can yield valuable intelligence with comparatively little exposure.

Collection and exfiltration are active carrying operations in which asset value determines whether the operational cost is justified. Trained artificial intelligence models may themselves become high-value assets and, depending on deployment and interface design, may be extracted directly, approximated through model extraction techniques, or accessed through compromised inference infrastructure. Value may also be realised in place through process disruption, ransomware, or manipulation of telemetry and operational reporting. Where egress is watched, a payload can be buried in traffic nobody inspects.

Re-price, because every collection updates the defender’s map as well as your own. Or weigh what is now in hand in Assessing, then deciding.