A city SOC detects an unauthorized AP in a lobby. For OSWP-style li…

Question

A city SOC detects an unauthorized AP in a lobby. For OSWP-style literacy, how should detection work be framed relative to offensive rogue-AP study?

Accepted Answer

Defenders use inventory or WIPS to find rogues; offensive study of how rogues work still needs clear authorization framing — Blue team spots the lobby impostor with inventories and WIPS; red/purple team studies how that impostor works only with a signed hall pass. Detection and offense are different jobs sharing the same vocabulary—authorization still draws the line. Do not skip RoE just because the SSID looks weird, and never dump secrets on social media.

Answer

Detection is illegal; only unauthorized attackers may study rogue APs

Answer

Offense requires no authorization if the SSID string looks misspelled

Answer

Once detected, staff must immediately publish the rogue's PSK on social media

A city SOC detects an unauthorized AP in a lobby. For OSWP-style literacy, how should detection work be framed relative to offensive rogue-AP study?

Short Explanation

Full Explanation