// GLOSSARY

Attack Path

The path to the critical target along the threat-actor, critical-asset or assumed-breach axis, under controlled execution, reduced to an evidence package with technical traces, a timeline and reproducible steps. It is the primary evidence object of the Modular Red Team Simulation. The weight of the concept hides in where the emphasis falls: what matters is not the destination but the path itself. Announcing a vulnerability's existence is a discovery; starting from that vulnerability, combining it with other weaknesses, escalating privilege and moving laterally to walk all the way to critical-target impact is proof. This distinction matters because none of the individual vulnerabilities may carry high severity, yet combined they can produce a business-stopping outcome; the attack path makes exactly this compound effect visible. It is not the same as a vulnerability chain or a kill chain; it travels to the end of those conceptual chains, to concrete business impact, and frames each step with MITRE ATT&CK. The chain-breaking control then shows at which link of this path a single correct intervention would render the whole chain inert.