Step-by-step attack runbooks¶

The preceding sections describe techniques. Running one on an actual engagement is a different problem, a matter of what to prepare, what to stand up, what order to work in, and what to do when it goes sideways.

Each playbook covers one attack chain from planning through execution to evidence collection. They assume the operator has a signed scope of work and a clear brief. They do not include anything useful for someone operating without authorisation.