A municipal enterprise-style assessment produced a lucky path to Domain Admin early. What else should the engagement still demonstrate?
Select an answer to reveal the explanation.
Short Explanation
Getting DA on Tuesday is not a free pass to skip the rest of the map. A solid engagement still shows coverage across the process and reports residual risk honestly.
Full Explanation
Attacking enterprise networks in a CPTS-aligned commercial sense values structured methodology: recon, enumeration, controlled exploitation paths, lateral movement within scope, and thorough reporting. A single fortunate Domain Admin path does not replace coverage of agreed objectives or documentation quality. Testers should continue authorized testing priorities and communicate what was and was not exercised. Clients pay for assessment breadth and clarity, not path fetishism.