В рамках проведения внутреннего аудита информационной безопасности (Red Team) перед нами стояла задача проверить АИС. Обычно на таких проектах ты заранее знаешь, что увидишь. что заказчик выполнил требования Приказа № 117: процессы задокументированы, матрица зрелости заполнена, отчёты уходят в ФСТЭК, CMDB ведёт учёт, SOC дежурит, EDR стоит на каждой машине.

Получив первоначальный доступ под локальной учёткой, мы оказались перед очевидным ограничением: на хосте - Windows 11 и работающий EDR. Любой готовый инструмент или «классический» payload почти сразу улетит в алерт. Вектор не пришлось выбирать - он сложился из доступных легитимных возможностей. Особенность заключалась в том, что мы не пытались выбраться из песочницы (техника T1497 Virtualization/Sandbox Evasion), а наоборот зашли внутрь нее, чтобы спрятаться от средств зашиты хоста.

• Updates from the first ODI, 1pm BST start at Leicester

• Sign up to receive The Spin newsletter | And mail Geoff

Capsey as keeper is away! I can’t say that was the most conventional method – she lunges across and sticks out one hand in front of slip, rather than moving her feet and getting both gloves to it – but she holds the take. Good bowling from Wong, a bit of swing away, and Tector just places the bat there looking to push square on the off side again.

4th over: Ireland 13-0 (Tector 11, Lewis 0) Almost through! Filer gets the ball swinging into Lewis, so far in that it smacks the pads outside the line of leg stump, then deflects back past the off stump! Lewis still hasn’t scored, and somehow survives. Leg bye.

Late changes to South Africa’s team smacked of mind games, but reinvigorated New Zealand remain in the hunt

The margins are slim in South Africa this past fortnight and not just on the scoreboard. According to aviation experts, one of the two planes flying over the stadium in Cape Town just before kick-off on Saturday came within 12 to 14 metres of hitting the top of the stand which, depending on your perspective, either ranks as highly-skilled piloting or the most gratuitous of matchday stunts.

Something similar could be said, as it happens, about Rassie Erasmus’s ongoing selectorial high jinks. His initial starting XV announced for the second Test bore about as much resemblance to the one that ultimately took the field as Erasmus did to the late, great Dolly Parton, with no fewer than six of the original lineup missing. It had the desired result in terms of South Africa levelling up the four-Test series at 1-1 but was yet another example of Erasmus toying with the game’s supposed conventions.