Structured Attack Campaign Tactic

Complete attack lifecycle from surface enumeration through probing to aggregated findings.

Orchestration

1. threat-surface-mapping enumerates all attackable surfaces of the artifact
2. attack-vector-generation produces prioritized attack vectors per surface
3. probe-execution executes each vector, records outcome (success/failure/partial)
4. Partial successes trigger follow-up vector generation (depth-first on promising attacks)
5. finding-aggregation deduplicates, classifies, and ranks all findings
6. attack-resilience-scoring computes coverage metrics and overall resilience score

Subagents Dispatched

• threat-surface-mapping (1 call at start)
• attack-vector-generation (1 call per surface)
• probe-execution (1 call per vector, budget-limited)
• finding-aggregation (1 call at end)
• attack-resilience-scoring (1 call at end)

Termination Conditions

• All budgeted attack vectors exhausted
• All surfaces probed to at least depth 1
• Critical vulnerability found (early termination with immediate report)
• Diminishing returns: 3 consecutive probes yield no new findings

<!-- BEGIN available-tables (generated) -->

Available SOPs

Optional, no fixed order; the final leaf is always a sop.

| SOP | When to use | | --- | --- | | attack-resilience-scoring | Compute overall resilience score (0.0-1.0) based on attack results, coverage, and vulnerability severity distribution. | | attack-vector-generation | Generate specific attack strategies for a given threat surface, producing concrete probes that can be executed. | | finding-aggregation | Aggregate, deduplicate, and classify findings from multiple probes into a coherent vulnerability report. | | probe-execution | Execute a single attack probe against an artifact, record the result with evidence and severity classification. | | threat-surface-mapping | Enumerate all attackable surfaces of an artifact — logical, empirical, methodological, social, and practical dimensions. |

<!-- END available-tables (generated) -->