Post-exploitation
Named by 4 kept items in this workspace.
Search every workspace for Post-exploitation. It matches the name as written, so it can find other things that share it.
The items that name it 4
Observed by GTIG following exploitation of CVE-2026-1731.
Built-in, agent-driven post-exploitation capabilities across multiple platforms, executed based on context and findings rather than fixed scripts
lateral movement
Most detailed subsection, with extensive Windows attack knowledge and fewer Linux examples
All techniques in this workspace.