Attack execution plan (aligned to threat actor TTPs)

- Initial access strategy (3-5 vectors with fallback) - Persistence mechanisms (stealthy, multiple) - Privilege escalation paths (AD, cloud, application) - Lateral movement techniques (living off the land) - Objective completion (data access, exfiltration, persistence) - Evasion and OPSEC throughout