Focus Analyzer

[ARMmaster17]

Takes in data about a server and assesses its danger level to the Gerbil-powered attack. For example, a DHCP server would be counted as a critical network link, while an admin workstation would count as a serious threat to the attack.

• AI engine instance
• Input grabber
• Data model for device results

[ARMmaster17]

Types of devices:

Threats to attack

• Admin workstations
• RDP gateway
• System Center server
• Local AV server
• SSH/RDP/Telnet connection sources

Network critical links

• Routers
• Switches
• DHCP server

Critical injection points

• TFTP server
• Windows shares/Samba server
• HTTP server
• iSCSI/Fibre channel server