WINDOWS_OS // SECURITY-ARCH blast-radius map

Every component below is either something an attacker abuses, a control that protects, or telemetry that detects. Select a node to see how it's attacked and how far the compromise spreads.

Attacker-abused
Dual-use
Protective
Telemetry
click node · detail drag pan · scroll zoom

Blast severity

Low — local / single user
Medium — host / app scope
High — lateral / server scope
Critical — domain / tenant-wide