Attack Path

You specify the starting point, which could be any asset in your AD (e.g., a user account, computer, group). You define the arrival point, representing the asset the attacker ultimately aims to compromise (e.g., a domain controller, sensitive data server).

1. In Tenable Identity Exposure, click Attack Path on the sidebar menu.

   The Attack Path pane appears.

   

2. In the banner, click Attack Path.

3. In the Starting point box, type the asset at the entry point.

4. In the Arrival point box, type the asset at the end of the path.

5. Click the icon.

   Tenable Identity Exposure displays the attack path between the two assets.

   

6. Optionally, you can click on the icon to do the following:

   • Click the Zoom slider to adjust the magnification of the graphics.

   • Click the Show all node tooltips toggle to display information about the assets.

Tenable Identity Exposure displays a graphical representation of the potential attack path, highlighting the connections between assets. Each connection represents a potential vulnerability or misconfiguration that the attacker could exploit to move laterally within your AD. You can zoom in and out to gain a better understanding of the path's details.

1. In Tenable Identity Exposure, click Attack Path on the sidebar menu.

   The Attack Path pane appears.

2. In the banner, click Blast Radius.

3. In the Search for an object box, type the name of an asset.

4. Click the icon.

   Tenable Identity Exposure displays the lateral connections radiating from that asset:

   

5. Click on the icons on the arrows between the assets to display the relations between them.

   

Each step in the attack path is associated with a risk score, indicating the severity of the vulnerability. This helps you prioritize which paths pose the most significant threat and require immediate attention. You can also click on individual connection points for more details about the specific vulnerability or misconfiguration involved.

1. In Tenable Identity Exposure, click Attack Path on the sidebar menu.

   The Attack Path pane appears.

2. In the banner, click Asset Exposure.

3. In the Search for an object box, type the name of an asset.

4. Click the icon.

   Tenable Identity Exposure displays the paths leading to the asset and the relations between the assets.

5. Click on the icons on the arrows between the assets to display the relations between them.

   

1. Click on a node on the attack path that you want to highlight.

   Tenable Identity Exposure pins that attack path on the screen.

2. To unpin the attack path, click the icon or another node on a different attack path.