Operational scenarios
This step displays the detailed attack chains, automatically generated by the ABE engine from the selected strategic scenarios, following the 4-phase model ENTER → FIND → EXPLOIT → OBJECTIVE.
Toolbar
| Control | Function |
|---|---|
| 🔍 Filter | Filters scenarios by label (SH → target zone) |
| ↩ / ↪ | Undo / Redo |
If no operational scenario exists yet, a message invites you to go back to 4 — Strategic scenarios to launch the generation.
Scenario card
Each operational scenario displays:
| Element | Description |
|---|---|
| Title | SH → target zone, taken from the original strategic scenario |
| S / L badges | Severity and likelihood of the scenario |
| Risk badge | Level R1 (Acceptable) to R4 (Critical) |
| ✏️ Edit S/L | Opens the inline editing of severity and likelihood |
Editing S/L automatically propagates the values to the associated strategic scenario and recalculates the risks.
Attack chain
The scenario is presented in 4 columns corresponding to the phases:
| Phase | Icon | Meaning |
|---|---|---|
| ENTER | 🚪 | Initial access actions to the system |
| FIND | 🔎 | Reconnaissance / discovery actions |
| EXPLOIT | 💥 | Vulnerability exploitation actions |
| OBJECTIVE | 🎯 | Reaching the attacker's final objective |
For each action in the chain: the applied rule, the description, the concerned zone, the link used (if any) and the vulnerabilities used.
Attack graph (step-by-step exploration)
The linked view 6b — Attack graph (/abe/graphe-attaque) offers an interactive, iteration-by-iteration exploration of the attack graph built on the topology and vulnerabilities:
- An analysis queue lists the active nodes (zone + states reached) at each iteration.
- For each node, the applicable actions are proposed (with their phase, target zone, link used, vulnerabilities used and resulting states); actions leading to an already-visited state are marked TERMINAL (cycle).
- Checked actions can be applied in batch via the Apply N selected action(s) button, which advances the graph by one iteration.
- The Reset button clears the built graph and starts over.
Complementarity
The Attack graph is a manual, educational exploration tool for the same propagation logic used by the automatic generation of operational scenarios — useful for understanding or auditing step by step how an attack chain is built from zones, links and vulnerabilities.