Attack chain, current configuration
Same scenario with Essential Eight alone (agent-specific controls set to zero):
Same scenario with agent-specific controls alone (Essential Eight set to zero):
Detect, contain, recover
If the agent does get going, how long before someone notices, how long to switch it off and cut its access, and how long to get back to a clean state. Times are illustrative and depend on the logging, containment and backup settings.
Maturity at a glance
The Essential Eight is rated at the lowest level reached across its eight controls, which is how the ACSC model works. The agent-control scale is this tool's own and is not an ACSC measure.
Three environments side by side
The same scenario run against no meaningful controls, the Essential Eight at Maturity Level 3, and the Essential Eight plus agent-specific controls at their highest level.
A decentralised estate
Large universities run many units with their own IT, budgets and risk appetite. Choose a profile for each unit and see the same scenario play out across the estate.
Network path
Where the agent session can actually reach, given your current settings. Numbers match the stages in the attack chain.
Session log
What the agent actually did at each stage, in plain terms.