{"id":20793,"date":"2026-09-15T11:26:22","date_gmt":"2026-09-15T09:26:22","guid":{"rendered":"https:\/\/www.cyberfero.com\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/"},"modified":"2026-09-15T11:26:22","modified_gmt":"2026-09-15T09:26:22","slug":"report-di-esempio","status":"publish","type":"page","link":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/","title":{"rendered":"Data Breach Resilience Test \u2013 Report di esempio"},"content":{"rendered":"\n<style id=\"cfrep-style\">\n.cfrep{--bg:#FFFFFF;--bg2:#F5F7F9;--panel:#FFFFFF;--panel2:#F5F7F9;\n  --line:#E3E7EC;--line2:#D3DAE2;\n  --text:#26303D;--head:#1B2430;--muted:#5A6472;--dim:#8A94A2;\n  --gold:#F49223;--gold-lt:#D97B10;--blue:#3195C4;--blue-lt:#2E8FB8;--cyan:#2E8FB8;\n  --red:#C8453A;--red-lt:#C8453A;--orange:#D97B22;--green:#1F9D57;--green-lt:#1F9D57;\n  --sans:'Open Sans',Arial,sans-serif;--hd:'Chakra Petch','Open Sans',sans-serif;\n  --mono:ui-monospace,\"Cascadia Code\",Consolas,\"Liberation Mono\",monospace;\n     \n   \n    \n      \n      \n  \n  \n  --maxw:1120px; --r:16px; --r-s:11px;\n}\n.cfrep *{margin:0;padding:0;box-sizing:border-box}\n.cfrep{background:transparent;color:var(--text);font-family:var(--sans);line-height:1.62;-webkit-font-smoothing:antialiased;overflow-x:clip}\n.cfrep a{color:inherit;text-decoration:none}\n.cfrep .wrap{max-width:var(--maxw);margin:0 auto;padding:0 26px}\n.cfrep .mono{font-family:var(--mono)}\n.cfrep .eyebrow{font-family:var(--mono);font-size:.68rem;letter-spacing:.24em;text-transform:uppercase;color:var(--gold-lt);display:inline-flex;align-items:center;gap:10px}\n.cfrep .eyebrow::before{content:\"\";width:26px;height:1px;background:linear-gradient(90deg,var(--gold),transparent)}\n.cfrep .grad{color:var(--head)}\n.cfrep h1,.cfrep h2,.cfrep h3{letter-spacing:-.02em;line-height:1.1;font-weight:700}\n.cfrep section{position:relative;padding:76px 0;border-top:1px solid var(--line)}\n.cfrep .dim{color:var(--dim)}\n.cfrep .red{color:var(--red-lt)}\n.cfrep .green{color:var(--green-lt)}\n.cfrep .gold{color:var(--gold-lt)}\n.cfrep .ribbon{position:fixed;top:19px;left:-58px;transform:rotate(-45deg);z-index:60;\n  background:linear-gradient(135deg,#F49223,#D97B10);color:#FFFFFF;font-family:var(--mono);\n  font-size:.6rem;letter-spacing:.18em;text-transform:uppercase;font-weight:700;padding:6px 66px;box-shadow:0 6px 20px -6px rgba(27,36,48,.25)}\n.cfrep .demo-bar{position:sticky;top:0;z-index:50;background:rgba(224,163,46,.14);border-bottom:1px solid rgba(224,163,46,.4);\n  backdrop-filter:blur(8px);-webkit-backdrop-filter:blur(8px)}\n.cfrep .demo-bar .wrap{display:flex;align-items:center;gap:12px;justify-content:center;padding-top:9px;padding-bottom:9px;flex-wrap:wrap;text-align:center}\n.cfrep .demo-bar b{font-family:var(--mono);font-size:.66rem;letter-spacing:.14em;text-transform:uppercase;color:var(--gold-lt)}\n.cfrep .demo-bar span{font-size:.82rem;color:var(--text)}\n.cfrep .demo-bar a{font-family:var(--mono);font-size:.66rem;letter-spacing:.1em;color:#fff;border:1px solid rgba(27,36,48,.3);border-radius:99px;padding:5px 13px;transition:.2s}\n.cfrep .demo-bar a:hover{background:rgba(27,36,48,.14)}\n.cfrep .top{padding:22px 0 8px}\n.cfrep .top .wrap{display:flex;align-items:center;justify-content:space-between;gap:20px;flex-wrap:wrap}\n.cfrep .brand{display:flex;align-items:center;gap:13px}\n.cfrep .brand .mk{width:46px;height:46px;flex:0 0 46px;border-radius:12px;overflow:hidden;position:relative;border:1px solid var(--line2)}\n.cfrep .brand .mk img{position:absolute;width:179%;height:179%;left:-39%;top:-16%;object-fit:cover}\n.cfrep .brand b{display:block;font-size:1rem;letter-spacing:.02em}\n.cfrep .brand small{display:block;font-family:var(--mono);font-size:.56rem;letter-spacing:.2em;color:var(--dim);text-transform:uppercase}\n.cfrep .docref{font-family:var(--mono);font-size:.66rem;letter-spacing:.08em;color:var(--dim);text-align:right}\n.cfrep .docref b{color:var(--muted)}\n.cfrep .cover{padding:64px 0 80px;overflow:hidden}\n.cfrep .cover .wrap{display:grid;grid-template-columns:1.15fr .85fr;gap:52px;align-items:center}\n.cfrep .cover .tag{display:inline-flex;gap:8px;align-items:center;font-family:var(--mono);font-size:.64rem;letter-spacing:.16em;text-transform:uppercase;\n  color:var(--red-lt);border:1px solid rgba(224,87,74,.45);background:rgba(224,87,74,.1);padding:6px 13px;border-radius:99px;box-shadow:0 0 22px -8px rgba(224,87,74,.7)}\n.cfrep .cover h1{font-size:clamp(2.3rem,5vw,3.5rem);margin:22px 0 16px}\n.cfrep .cover .lead{font-size:1.06rem;color:var(--muted);max-width:52ch}\n.cfrep .cover .client{margin-top:26px;padding:18px 22px;border:1px solid var(--line);border-radius:var(--r);background:var(--panel);display:grid;grid-template-columns:1fr 1fr;gap:14px 26px}\n.cfrep .cover .client div span{display:block;font-family:var(--mono);font-size:.6rem;letter-spacing:.16em;text-transform:uppercase;color:var(--dim);margin-bottom:3px}\n.cfrep .cover .client div b{font-size:.94rem;color:var(--text);font-weight:600}\n.cfrep .dial{position:relative;aspect-ratio:1;max-width:400px;margin:0 auto;width:100%}\n.cfrep .dial svg{width:100%;height:100%;filter:drop-shadow(0 30px 60px rgba(224,87,74,.28))}\n.cfrep .dial .lab{position:absolute;inset:0;display:flex;flex-direction:column;align-items:center;justify-content:center;text-align:center}\n.cfrep .dial .lab .k{font-family:var(--mono);font-size:.62rem;letter-spacing:.28em;text-transform:uppercase;color:var(--dim)}\n.cfrep .dial .lab .v{font-size:2.9rem;font-weight:800;letter-spacing:-.03em;color:var(--red-lt);line-height:1;margin:6px 0 2px;text-shadow:none}\n.cfrep .dial .lab .s{font-family:var(--mono);font-size:.72rem;letter-spacing:.14em;color:var(--muted)}\n.cfrep .spin{transform-origin:200px 200px;animation:sp 34s linear infinite}\n@keyframes cfsp{to{transform:rotate(360deg)}}\n@media(prefers-reduced-motion:reduce){.cfrep .spin{animation:none}}\n.cfrep .strip{display:grid;grid-template-columns:repeat(4,1fr);gap:1px;background:var(--line);border:1px solid var(--line);border-radius:var(--r);overflow:hidden;margin-top:8px}\n.cfrep .strip .c{background:#F5F7F9;padding:24px 20px;text-align:center}\n.cfrep .strip .c b{display:block;font-size:2.1rem;font-weight:800;letter-spacing:-.03em;line-height:1}\n.cfrep .strip .c.bad b{color:var(--red-lt)}\n.cfrep .strip .c.warn b{color:var(--orange)}\n.cfrep .strip .c.ok b{color:var(--green-lt)}\n.cfrep .strip .c.neu b{color:var(--blue-lt)}\n.cfrep .strip .c span{display:block;margin-top:8px;font-family:var(--mono);font-size:.6rem;letter-spacing:.13em;text-transform:uppercase;color:var(--dim);line-height:1.5}\n.cfrep .sh{max-width:70ch;margin-bottom:34px}\n.cfrep .sh h2{font-size:clamp(1.6rem,3.4vw,2.2rem);margin:12px 0 12px}\n.cfrep .sh p{color:var(--muted);font-size:1rem}\n.cfrep .secnum{position:absolute;top:34px;right:26px;font-family:var(--mono);font-size:4.6rem;font-weight:800;color:rgba(27,36,48,.032);letter-spacing:-.04em;pointer-events:none}\n.cfrep .exec{display:grid;grid-template-columns:repeat(3,1fr);gap:16px}\n.cfrep .ecard{border:1px solid var(--line);border-radius:var(--r);background:var(--panel);padding:24px 22px;position:relative;overflow:hidden}\n.cfrep .ecard::before{content:\"\";position:absolute;left:0;top:0;bottom:0;width:3px;background:var(--red)}\n.cfrep .ecard.g::before{background:var(--green)}\n.cfrep .ecard.o::before{background:var(--orange)}\n.cfrep .ecard .k{font-family:var(--mono);font-size:.62rem;letter-spacing:.14em;text-transform:uppercase;color:var(--dim)}\n.cfrep .ecard .n{font-size:2.4rem;font-weight:800;letter-spacing:-.03em;margin:6px 0 4px}\n.cfrep .ecard p{font-size:.88rem;color:var(--muted);line-height:1.55}\n.cfrep .exec-cta{display:flex;align-items:center;gap:22px;justify-content:space-between;flex-wrap:wrap;margin-top:22px;\n  border:1px solid rgba(244,146,35,.45);border-radius:var(--r);padding:22px 26px;\n  background:radial-gradient(500px 200px at 8% 0%,rgba(244,146,35,.16),transparent 62%),radial-gradient(500px 200px at 96% 100%,rgba(49,149,196,.14),transparent 62%),rgba(27,36,48,.03);\n  transition:.2s}\n.cfrep .exec-cta:hover{border-color:var(--gold-lt);transform:translateY(-2px);box-shadow:0 22px 50px -30px rgba(244,146,35,.7)}\n.cfrep .exec-cta .tx b{display:block;font-size:1.12rem;color:var(--text)}\n.cfrep .exec-cta .tx span{display:block;font-size:.9rem;color:var(--muted);margin-top:3px}\n.cfrep .exec-cta .go{flex:0 0 auto;display:inline-flex;align-items:center;gap:10px;font-family:var(--mono);font-size:.8rem;letter-spacing:.06em;font-weight:700;\n  color:#FFFFFF;background:linear-gradient(135deg,#F49223,#D97B10);padding:13px 22px;border-radius:99px;box-shadow:0 10px 28px -12px rgba(244,146,35,.8)}\n.cfrep .exec-cta .go svg{width:16px;height:16px;stroke:#FFFFFF;fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}\n.cfrep .demo-bar a.exe{color:#FFFFFF;background:linear-gradient(135deg,#F49223,#D97B10);border-color:transparent;font-weight:700}\n.cfrep .sev{display:grid;grid-template-columns:repeat(5,1fr);gap:12px;margin-top:8px}\n.cfrep .sev .s{border:1px solid var(--line);border-radius:var(--r-s);padding:16px 15px;background:var(--panel)}\n.cfrep .sev .s b{display:flex;align-items:center;gap:8px;font-size:.9rem}\n.cfrep .sev .s b i{width:11px;height:11px;border-radius:3px;display:inline-block}\n.cfrep .sev .s span{display:block;margin-top:8px;font-size:.78rem;color:var(--muted);line-height:1.5}\n.cfrep .dot-c{background:var(--red)}\n.cfrep .dot-h{background:var(--red-lt)}\n.cfrep .dot-m{background:var(--orange)}\n.cfrep .dot-l{background:var(--green-lt)}\n.cfrep .dot-n{background:var(--dim)}\n.cfrep .scope-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:14px 26px;border:1px solid var(--line);border-radius:var(--r);background:var(--panel);padding:22px;margin:0 0 22px}\n.cfrep .scope-grid div span{display:block;font-family:var(--mono);font-size:.6rem;letter-spacing:.16em;text-transform:uppercase;color:var(--dim);margin-bottom:3px}\n.cfrep .scope-grid div b{font-size:.94rem;color:var(--text);font-weight:600}\n.cfrep .scope2{display:grid;grid-template-columns:1fr 1fr;gap:16px;margin:0 0 30px}\n.cfrep .scopebox{border:1px solid var(--line);border-radius:var(--r);padding:20px 22px;background:var(--panel)}\n.cfrep .scopebox.in{border-color:rgba(47,191,113,.3);background:rgba(47,191,113,.05)}\n.cfrep .scopebox.out{border-color:rgba(224,163,46,.3);background:rgba(224,163,46,.05)}\n.cfrep .scopebox b{display:block;font-family:var(--mono);font-size:.64rem;letter-spacing:.14em;text-transform:uppercase;margin-bottom:12px}\n.cfrep .scopebox.in b{color:var(--green-lt)}\n.cfrep .scopebox.out b{color:var(--orange)}\n.cfrep .scopebox ul{list-style:none}\n.cfrep .scopebox li{display:flex;gap:10px;font-size:.88rem;color:var(--muted);padding:6px 0;line-height:1.5}\n.cfrep .scopebox.in li::before{content:\"\u25b9\";color:var(--green-lt)}\n.cfrep .scopebox.out li::before{content:\"\u25b8\";color:var(--orange)}\n.cfrep .scope-sub{font-size:1.05rem;margin:6px 0 12px}\n@media(max-width:760px){.cfrep .scope-grid{grid-template-columns:1fr}\n.cfrep .scope2{grid-template-columns:1fr}}\n.cfrep .matrix{border:1px solid var(--line);border-radius:var(--r);overflow:hidden;margin-top:8px}\n.cfrep .mrow{display:grid;grid-template-columns:44px 1fr 118px 118px;align-items:center;border-top:1px solid var(--line);transition:background .15s}\n.cfrep .mrow:first-child{border-top:none}\n.cfrep .mrow:hover{background:rgba(27,36,48,.02)}\n.cfrep .mrow.head{background:#F5F7F9;position:sticky;top:0}\n.cfrep .mrow.head>*{font-family:var(--mono);font-size:.6rem;letter-spacing:.13em;text-transform:uppercase;color:var(--dim);padding:14px 14px}\n.cfrep .mrow.hi{background:rgba(224,87,74,.05)}\n.cfrep .mrow.hi:hover{background:rgba(224,87,74,.08)}\n.cfrep .mrow>div{padding:15px 14px;font-size:.9rem}\n.cfrep .mrow .no{font-family:var(--mono);color:var(--dim);font-size:.8rem}\n.cfrep .mrow .nm{color:var(--text)}\n.cfrep .mrow .nm .star{color:var(--gold-lt);margin-left:7px;font-size:.66rem;font-family:var(--mono);letter-spacing:.1em;vertical-align:middle}\n.cfrep .res{display:inline-flex;align-items:center;gap:7px;font-family:var(--mono);font-size:.72rem;letter-spacing:.1em;font-weight:600;padding:5px 12px;border-radius:99px}\n.cfrep .res.fail{color:#B23A30;background:rgba(224,87,74,.16);border:1px solid rgba(224,87,74,.4)}\n.cfrep .res.pass{color:#177A44;background:rgba(47,191,113,.14);border:1px solid rgba(47,191,113,.4)}\n.cfrep .res.na{color:var(--dim);background:rgba(27,36,48,.04);border:1px solid var(--line2)}\n.cfrep .res i{width:7px;height:7px;border-radius:50%;background:currentColor;box-shadow:0 0 8px currentColor}\n.cfrep .kc{position:relative;margin-top:10px;padding-left:8px}\n.cfrep .kc::before{content:\"\";position:absolute;left:23px;top:10px;bottom:10px;width:2px;background:linear-gradient(180deg,var(--blue),var(--gold),var(--red))}\n.cfrep .kstep{position:relative;padding:0 0 26px 62px;min-height:52px}\n.cfrep .kstep::before{content:\"\";position:absolute;left:15px;top:2px;width:18px;height:18px;border-radius:50%;background:var(--bg2);border:2px solid var(--red);box-shadow:0 0 0 4px rgba(224,87,74,.14)}\n.cfrep .kstep .t{display:flex;gap:10px;align-items:baseline;flex-wrap:wrap}\n.cfrep .kstep .clock{font-family:var(--mono);font-size:.72rem;color:var(--gold-lt);letter-spacing:.06em}\n.cfrep .kstep h4{font-size:1rem;margin:0}\n.cfrep .kstep .mi{font-family:var(--mono);font-size:.6rem;letter-spacing:.08em;color:var(--dim);border:1px solid var(--line2);border-radius:6px;padding:2px 7px}\n.cfrep .kstep p{font-size:.86rem;color:var(--muted);margin-top:5px;max-width:74ch}\n.cfrep .finding{border:1px solid var(--line);border-radius:var(--r);background:linear-gradient(180deg,rgba(27,36,48,.025),rgba(27,36,48,.008));margin-top:22px;overflow:hidden}\n.cfrep .finding .fh{display:flex;gap:16px;align-items:flex-start;padding:22px 24px;border-bottom:1px solid var(--line);flex-wrap:wrap}\n.cfrep .finding .fid{flex:0 0 auto;font-family:var(--mono);font-size:.72rem;letter-spacing:.1em;color:#FFFFFF;background:linear-gradient(135deg,#F49223,#D97B10);padding:7px 12px;border-radius:9px;font-weight:700}\n.cfrep .finding .ft{flex:1 1 260px}\n.cfrep .finding .ft h3{font-size:1.2rem}\n.cfrep .finding .ft .sub{font-size:.86rem;color:var(--muted);margin-top:4px}\n.cfrep .finding .badges{display:flex;gap:8px;flex-wrap:wrap}\n.cfrep .pill{font-family:var(--mono);font-size:.62rem;letter-spacing:.1em;text-transform:uppercase;padding:6px 11px;border-radius:99px;border:1px solid var(--line2);white-space:nowrap}\n.cfrep .pill.crit{color:#B23A30;background:rgba(224,87,74,.16);border-color:rgba(224,87,74,.45)}\n.cfrep .pill.high{color:#A8600F;background:rgba(224,163,46,.14);border-color:rgba(224,163,46,.45)}\n.cfrep .pill.mi{color:var(--muted)}\n.cfrep .fb{padding:22px 24px;display:grid;grid-template-columns:1.15fr .85fr;gap:26px}\n.cfrep .fb h5{font-family:var(--mono);font-size:.64rem;letter-spacing:.14em;text-transform:uppercase;color:var(--gold-lt);margin-bottom:9px}\n.cfrep .fb p{font-size:.9rem;color:var(--muted);margin-bottom:16px}\n.cfrep .kv{display:grid;grid-template-columns:auto 1fr;gap:8px 16px;font-size:.85rem;margin-bottom:6px}\n.cfrep .kv dt{font-family:var(--mono);font-size:.66rem;letter-spacing:.1em;text-transform:uppercase;color:var(--dim);padding-top:2px}\n.cfrep .kv dd{color:var(--text)}\n.cfrep .miti{border:1px solid rgba(47,191,113,.32);background:rgba(47,191,113,.07);border-radius:var(--r-s);padding:14px 16px;margin-top:8px}\n.cfrep .miti b{color:var(--green-lt);font-family:var(--mono);font-size:.64rem;letter-spacing:.12em;text-transform:uppercase;display:block;margin-bottom:6px}\n.cfrep .miti ul{list-style:none;font-size:.85rem;color:var(--muted)}\n.cfrep .miti li{padding-left:18px;position:relative;margin:5px 0}\n.cfrep .miti li::before{content:\"\u2192\";position:absolute;left:0;color:var(--green-lt)}\n.cfrep .term{border:1px solid var(--line2);border-radius:12px;overflow:hidden;background:#04060C;box-shadow:0 24px 60px -30px rgba(0,0,0,.9)}\n.cfrep .term .bar{display:flex;align-items:center;gap:8px;padding:10px 14px;background:#0A0F1A;border-bottom:1px solid var(--line)}\n.cfrep .term .bar .d{width:11px;height:11px;border-radius:50%}\n.cfrep .term .bar .d1{background:#FF5F57}\n.cfrep .term .bar .d2{background:#FEBC2E}\n.cfrep .term .bar .d3{background:#28C840}\n.cfrep .term .bar span{margin-left:8px;font-family:var(--mono);font-size:.68rem;color:var(--dim)}\n.cfrep .term pre{margin:0;padding:16px 16px;font-family:var(--mono);font-size:.74rem;line-height:1.72;color:#C7D3E6;overflow-x:auto;white-space:pre}\n.cfrep .term .p{color:var(--green-lt)}\n.cfrep .term .c{color:var(--blue-lt)}\n.cfrep .term .o{color:#8A97AD}\n.cfrep .term .r{color:var(--red-lt);font-weight:600}\n.cfrep .term .g{color:var(--gold-lt)}\n.cfrep .term .ok{color:var(--green-lt);font-weight:600}\n.cfrep .shot-cap{font-family:var(--mono);font-size:.64rem;letter-spacing:.06em;color:var(--dim);margin-top:9px;display:flex;align-items:center;gap:8px}\n.cfrep .shot-cap i{width:6px;height:6px;border-radius:50%;background:var(--gold-lt)}\n.cfrep .att{display:flex;flex-wrap:wrap;gap:8px;margin-top:8px}\n.cfrep .att .t{border:1px solid var(--line2);border-radius:9px;padding:9px 13px;background:var(--panel);min-width:120px}\n.cfrep .att .t b{display:block;font-family:var(--mono);font-size:.66rem;color:var(--red-lt);letter-spacing:.06em}\n.cfrep .att .t span{display:block;font-size:.78rem;color:var(--muted);margin-top:2px}\n.cfrep .attnav{margin-top:10px}\n.cfrep .attscroll{overflow-x:auto;padding-bottom:8px;scrollbar-width:thin}\n.cfrep .attgrid{display:grid;grid-auto-flow:column;grid-auto-columns:minmax(148px,1fr);gap:10px;min-width:940px}\n.cfrep .attcol{display:flex;flex-direction:column;gap:8px}\n.cfrep .att-h{font-family:var(--mono);font-size:.6rem;letter-spacing:.05em;text-transform:uppercase;color:var(--dim);\n  padding:9px 10px;border:1px solid var(--line);border-radius:9px;background:#F5F7F9;text-align:center;line-height:1.35;min-height:52px;display:flex;flex-direction:column;justify-content:center;gap:3px}\n.cfrep .att-h b{color:var(--muted);font-size:.62rem}\n.cfrep .att-h .ta{color:var(--dim);font-size:.54rem}\n.cfrep .attcell{border:1px solid var(--line);border-radius:9px;padding:10px 11px;background:var(--panel);cursor:pointer;transition:.18s;position:relative}\n.cfrep .attcell .id{font-family:var(--mono);font-size:.66rem;letter-spacing:.04em;color:var(--dim)}\n.cfrep .attcell .nm{font-size:.76rem;color:var(--muted);margin-top:3px;line-height:1.3}\n.cfrep .attcell.on{border-color:rgba(224,87,74,.5);background:linear-gradient(160deg,rgba(224,87,74,.16),rgba(224,87,74,.05))}\n.cfrep .attcell.on .id{color:var(--red-lt)}\n.cfrep .attcell.on .nm{color:var(--text)}\n.cfrep .attcell.on::after{content:\"\";position:absolute;top:9px;right:9px;width:7px;height:7px;border-radius:50%;background:var(--red-lt);box-shadow:0 0 8px var(--red-lt)}\n.cfrep .attcell.off{opacity:.42}\n.cfrep .attcell:hover{transform:translateY(-2px);border-color:var(--line2)}\n.cfrep .attcell.sel{outline:2px solid var(--gold-lt);outline-offset:1px}\n.cfrep .attlegend{display:flex;gap:18px;flex-wrap:wrap;margin-top:14px;font-family:var(--mono);font-size:.64rem;letter-spacing:.08em;color:var(--dim)}\n.cfrep .attlegend span{display:inline-flex;align-items:center;gap:7px}\n.cfrep .attlegend i{width:11px;height:11px;border-radius:3px}\n.cfrep .attlegend i.on{background:rgba(224,87,74,.6);border:1px solid var(--red-lt)}\n.cfrep .attlegend i.off{background:var(--panel);border:1px solid var(--line2)}\n.cfrep .attdetail{margin-top:16px;border:1px solid var(--line);border-radius:var(--r);background:var(--panel);padding:20px 22px;min-height:104px}\n.cfrep .attdetail .dh{display:flex;gap:12px;align-items:center;flex-wrap:wrap;margin-bottom:10px}\n.cfrep .attdetail .dh .id{font-family:var(--mono);font-size:.72rem;color:#FFFFFF;background:linear-gradient(135deg,#F49223,#D97B10);padding:5px 10px;border-radius:7px;font-weight:700}\n.cfrep .attdetail .dh h4{font-size:1.05rem}\n.cfrep .attdetail .dh .tac{font-family:var(--mono);font-size:.6rem;letter-spacing:.1em;text-transform:uppercase;color:var(--dim);border:1px solid var(--line2);border-radius:6px;padding:3px 8px}\n.cfrep .attdetail p{font-size:.9rem;color:var(--muted);margin-bottom:10px;max-width:80ch}\n.cfrep .attdetail .meta{display:flex;gap:10px;flex-wrap:wrap;font-family:var(--mono);font-size:.66rem}\n.cfrep .attdetail .meta span{border:1px solid var(--line2);border-radius:99px;padding:5px 11px;color:var(--muted)}\n.cfrep .attdetail .meta .res-fail{color:#B23A30;border-color:rgba(224,87,74,.45);background:rgba(224,87,74,.12)}\n.cfrep .attdetail .meta .res-pass{color:#177A44;border-color:rgba(47,191,113,.45);background:rgba(47,191,113,.1)}\n.cfrep .attdetail .ph{color:var(--dim);font-size:.9rem}\n@media(max-width:920px){.cfrep .attgrid{min-width:840px}}\n.cfrep .rem{display:grid;grid-template-columns:repeat(3,1fr);gap:16px;margin-top:8px}\n.cfrep .rcard{border:1px solid var(--line);border-radius:var(--r);padding:22px;background:var(--panel)}\n.cfrep .rcard .h{display:flex;align-items:center;gap:10px;margin-bottom:14px}\n.cfrep .rcard .h b{font-family:var(--mono);font-size:.64rem;letter-spacing:.12em;text-transform:uppercase}\n.cfrep .rcard.now .h b{color:var(--red-lt)}\n.cfrep .rcard.soon .h b{color:var(--orange)}\n.cfrep .rcard.plan .h b{color:var(--blue-lt)}\n.cfrep .rcard .h .tag{margin-left:auto;font-family:var(--mono);font-size:.58rem;color:var(--dim);border:1px solid var(--line2);border-radius:6px;padding:3px 7px}\n.cfrep .rcard ul{list-style:none;font-size:.87rem;color:var(--muted)}\n.cfrep .rcard li{padding:8px 0 8px 20px;position:relative;border-top:1px solid var(--line)}\n.cfrep .rcard li:first-child{border-top:none}\n.cfrep .rcard li::before{content:\"\";position:absolute;left:0;top:15px;width:7px;height:7px;border-radius:2px}\n.cfrep .rcard.now li::before{background:var(--red)}\n.cfrep .rcard.soon li::before{background:var(--orange)}\n.cfrep .rcard.plan li::before{background:var(--blue-lt)}\n.cfrep .cta{border:1px solid rgba(244,146,35,.4);border-radius:22px;padding:46px 40px;text-align:center;\n  background:radial-gradient(600px 320px at 20% 0%,rgba(224,87,74,.14),transparent 62%),radial-gradient(600px 320px at 90% 100%,rgba(244,146,35,.2),transparent 62%),var(--panel)}\n.cfrep .cta h2{font-size:clamp(1.6rem,3.4vw,2.2rem);margin-bottom:14px}\n.cfrep .cta p{color:var(--muted);max-width:60ch;margin:0 auto 26px}\n.cfrep .btnrow{display:flex;gap:13px;justify-content:center;flex-wrap:wrap}\n.cfrep .btn{display:inline-flex;align-items:center;gap:9px;padding:13px 24px;border-radius:99px;font-size:.9rem;font-weight:600;border:1px solid transparent;transition:.22s;cursor:pointer;font-family:inherit}\n.cfrep .btn svg{width:15px;height:15px}\n.cfrep .btn-gold{background:linear-gradient(135deg,#F49223,#D97B10);color:#FFFFFF;box-shadow:0 10px 28px -12px rgba(244,146,35,.8)}\n.cfrep .btn-gold:hover{transform:translateY(-2px)}\n.cfrep .btn-ghost{border-color:var(--line2);color:var(--text);background:rgba(27,36,48,.03)}\n.cfrep .btn-ghost:hover{border-color:rgba(49,149,196,.5);background:rgba(49,149,196,.1)}\n.cfrep .rfoot{border-top:1px solid var(--line);padding:40px 0 60px;margin-top:20px}\n.cfrep .rfoot .wrap{display:flex;justify-content:space-between;gap:20px;flex-wrap:wrap;align-items:center}\n.cfrep .rfoot .lg{display:flex;align-items:center;gap:12px}\n.cfrep .rfoot .lg img{width:150px;height:auto;filter:drop-shadow(0 0 30px rgba(49,149,196,.22))}\n.cfrep .legal{font-size:.74rem;color:var(--dim);line-height:1.6;max-width:92ch;margin-top:22px}\n@media(max-width:920px){.cfrep .cover .wrap{grid-template-columns:1fr;gap:34px}\n.cfrep .dial{max-width:320px}\n.cfrep .exec,.cfrep .rem{grid-template-columns:1fr}\n.cfrep .sev{grid-template-columns:repeat(2,1fr)}\n.cfrep .fb{grid-template-columns:1fr}\n.cfrep .strip{grid-template-columns:repeat(2,1fr)}\n.cfrep .mrow{grid-template-columns:36px 1fr 92px 92px}\n.cfrep .mrow>div{padding:12px 9px;font-size:.82rem}\n.cfrep .cover .client{grid-template-columns:1fr}\n.cfrep .secnum{display:none}}\n@media print{.cfrep .demo-bar,.cfrep .ribbon,.cfrep .cta,.cfrep .btnrow{display:none}\n.cfrep section{padding:30px 0;break-inside:avoid}\n.cfrep .finding{break-inside:avoid}}\n.cfrep{text-align:left;font-size:16px;max-width:1140px;margin:0 auto}\n.cfrep h1,.cfrep h2,.cfrep h3,.cfrep h4,.cfrep h5{font-family:var(--hd);color:var(--head);text-transform:none;margin:0;padding:0}\n.cfrep p,.cfrep ul,.cfrep li,.cfrep dl,.cfrep dd,.cfrep dt,.cfrep pre{margin:0;padding:0;background:none}\n.cfrep section{background:transparent}\n.cfrep a:hover{text-decoration:none}\n.cfrep .wrap{max-width:none;padding:0 4px}\n.cfrep .demo-bar{position:relative;top:auto;border:1px solid rgba(244,146,35,.4);border-radius:10px;background:rgba(244,146,35,.08)}\n.cfrep .demo-bar a{color:var(--head);border-color:var(--line2)}\n.cfrep .demo-bar a:hover{background:#fff;border-color:var(--gold)}\n.cfrep .demo-bar a.exe{color:#fff}\n.cfrep .brand .mk{display:flex;align-items:center;justify-content:center;background:linear-gradient(135deg,#F49223,#D97B10);border:0}\n.cfrep .brand .mk svg{width:24px;height:24px;stroke:#fff;fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}\n.cfrep .brand b{font-family:var(--hd);color:var(--head);letter-spacing:.08em}\n.cfrep .spin{animation-name:cfsp}\n.cfrep .term pre{background:transparent;border:0;color:#C7D3E6}\n.cfrep .term{background:#0F1620}\n.cfrep .term .bar{background:#18212D;border-bottom-color:rgba(255,255,255,.08)}\n.cfrep .panel-shadow,.cfrep .finding,.cfrep .ecard,.cfrep .rcard,.cfrep .kpi,.cfrep .icard,.cfrep .dcard,.cfrep .risk{box-shadow:0 1px 2px rgba(27,36,48,.05)}\n.cfrep .cover .client,.cfrep .scope-grid{background:var(--bg2)}\n.cfrep .icard-media{background:linear-gradient(135deg,rgba(244,146,35,.18),rgba(49,149,196,.12));height:96px;display:flex;align-items:center;justify-content:center}\n.cfrep .icard-media svg{width:38px;height:38px;stroke:var(--gold-lt);fill:none;stroke-width:1.6;stroke-linecap:round;stroke-linejoin:round;position:relative;z-index:1}\n.cfrep .icard-media::after{display:none}\n.cfrep .icard .bd{padding-top:18px}\n.cfrep .rfoot .lg{font-family:var(--hd);font-weight:700;letter-spacing:.14em;color:var(--head);font-size:1.1rem}\n.cfrep .rfoot .lg span{color:var(--gold)}\n.cfrep .grad{color:var(--head)}\n.cfrep .mrow.head{position:static}\n\n<\/style>\n<div class=\"cfrep cfrep-tech\">\n<div class=\"demo-bar\">\n  <div class=\"wrap\">\n    <b>Report di esempio<\/b>\n    <span>Documento dimostrativo. Azienda, host, indirizzi, credenziali e risultati sono <b style=\"color:var(--head)\">completamente fittizi<\/b> e non si riferiscono ad alcun cliente reale.<\/span>\n    <a href=\"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/sintesi-per-il-board\/\" class=\"exe\">\u2605 Sintesi per il board<\/a>\n    <a href=\"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/\">\u2190 Torna al servizio<\/a>\n  <\/div>\n<\/div>\n\n<div class=\"top\">\n  <div class=\"wrap\">\n    <div class=\"brand\">\n      <span class=\"mk\"><svg viewBox=\"0 0 24 24\" aria-hidden=\"true\"><path d=\"M12 3l8 3v6c0 5-3.5 8-8 9-4.5-1-8-4-8-9V6z\"\/><path d=\"M9 12l2 2 4-4\"\/><\/svg><\/span>\n      <span><b>CYBERFERO<\/b><small>Data Breach Resilience Test<\/small><\/span>\n    <\/div>\n    <div class=\"docref\">\n      <b>DATA BREACH RESILIENCE TEST<\/b><br>\n      Rif. CF-DBRT-2026-0417 \u00b7 Rev. 1.0 \u00b7 Classificazione: <span style=\"color:var(--red-lt)\">Confidenziale (esempio)<\/span>\n    <\/div>\n  <\/div>\n<\/div>\n\n<!-- ================= COVER ================= -->\n<div class=\"cover\">\n  <div class=\"wrap\">\n    <div>\n      <span class=\"tag\"><svg width=\"12\" height=\"12\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 3l9 4v6c0 5-3.8 8.9-9 10-5.2-1.1-9-5-9-10V7z\" stroke=\"currentColor\" stroke-width=\"1.6\"\/><path d=\"M12 8v5M12 16h.01\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\"\/><\/svg> Esito complessivo \u00b7 CRITICO<\/span>\n      <h1 class=\"grad\">Data Breach<br>Resilience Test<\/h1>\n      <p class=\"lead\">Simulazione di attacco reale in ambiente controllato, dalla prospettiva di un attaccante interno alla rete. Verifica della capacit\u00e0 di rilevamento e risposta di antivirus, EDR\/XDR, MDR e SOC di fronte a tecniche mai osservate prima.<\/p>\n      <div class=\"client\">\n        <div><span>Cliente (esempio)<\/span><b>AZIENDA S.p.A.<\/b><\/div>\n        <div><span>Perimetro<\/span><b>Rete LAN \u00b7 Dominio interno<\/b><\/div>\n        <div><span>Prospettiva<\/span><b>Attaccante interno autenticato<\/b><\/div>\n        <div><span>Periodo<\/span><b>Aprile 2026 \u00b7 esempio<\/b><\/div>\n        <div><span>Difese in campo<\/span><b>EDR\/XDR + MDR 24\/7 + SOC<\/b><\/div>\n        <div><span>Metodo<\/span><b>Toolkit proprietario Cyberfero<\/b><\/div>\n      <\/div>\n    <\/div>\n    <div>\n      <div class=\"dial\">\n        <svg viewBox=\"0 0 400 400\" aria-label=\"Livello di rischio: Critico\">\n          <defs>\n            <radialGradient id=\"core\"><stop offset=\"0%\" stop-color=\"#E0574A\" stop-opacity=\".9\"\/><stop offset=\"55%\" stop-color=\"#E0574A\" stop-opacity=\".18\"\/><stop offset=\"100%\" stop-color=\"#E0574A\" stop-opacity=\"0\"\/><\/radialGradient>\n            <linearGradient id=\"ring\" x1=\"0\" y1=\"0\" x2=\"1\" y2=\"1\"><stop offset=\"0%\" stop-color=\"#FF6E60\"\/><stop offset=\"60%\" stop-color=\"#E0A32E\" stop-opacity=\".5\"\/><stop offset=\"100%\" stop-color=\"#2F7DF6\" stop-opacity=\".7\"\/><\/linearGradient>\n          <\/defs>\n          <circle cx=\"200\" cy=\"200\" r=\"168\" fill=\"none\" stroke=\"rgba(27,36,48,.05)\"\/>\n          <circle cx=\"200\" cy=\"200\" r=\"132\" fill=\"none\" stroke=\"rgba(27,36,48,.05)\"\/>\n          <g class=\"spin\">\n            <circle cx=\"200\" cy=\"200\" r=\"168\" fill=\"none\" stroke=\"url(#ring)\" stroke-width=\"2\" stroke-dasharray=\"6 12\"\/>\n            <circle cx=\"200\" cy=\"32\" r=\"4.5\" fill=\"#FF6E60\"\/>\n            <circle cx=\"368\" cy=\"200\" r=\"3.5\" fill=\"#E0A32E\"\/>\n            <circle cx=\"200\" cy=\"368\" r=\"3\" fill=\"#2E8FB8\"\/>\n          <\/g>\n          <circle cx=\"200\" cy=\"200\" r=\"112\" fill=\"url(#core)\"\/>\n          <circle cx=\"200\" cy=\"200\" r=\"118\" fill=\"none\" stroke=\"rgba(224,87,74,.5)\" stroke-width=\"1.4\" stroke-dasharray=\"3 6\"\/>\n          <polygon points=\"200,120 269,160 269,240 200,280 131,240 131,160\" fill=\"none\" stroke=\"rgba(255,110,96,.45)\" stroke-width=\"1.3\"\/>\n        <\/svg>\n        <div class=\"lab\">\n          <span class=\"k\">Risk rating<\/span>\n          <span class=\"v\">CRITICO<\/span>\n          <span class=\"s\">14 \/ 16 test superati dall&#8217;attaccante<\/span>\n        <\/div>\n      <\/div>\n    <\/div>\n  <\/div>\n  <div class=\"wrap\" style=\"margin-top:36px\">\n    <div class=\"strip\">\n      <div class=\"c bad\"><b>14<\/b><span>Test falliti dalla difesa<\/span><\/div>\n      <div class=\"c ok\"><b>2<\/b><span>Test rilevati \/ bloccati<\/span><\/div>\n      <div class=\"c warn\"><b>0<\/b><span>Alert generati dal SOC<\/span><\/div>\n      <div class=\"c neu\"><b>04:41<\/b><span>Da accesso a Domain Admin<\/span><\/div>\n    <\/div>\n  <\/div>\n<\/div>\n\n<!-- ================= EXECUTIVE SUMMARY ================= -->\n<section id=\"summary\">\n  <span class=\"secnum\">01<\/span>\n  <div class=\"wrap\">\n    <div class=\"sh\">\n      <span class=\"eyebrow\">Executive summary<\/span>\n      <h2>Le difese non hanno visto l&#8217;attacco.<br>L&#8217;attaccante ha visto tutto.<\/h2>\n      <p>Partendo da una singola postazione con un utente di dominio standard, il team Cyberfero ha raggiunto il pieno controllo del dominio Active Directory in meno di un&#8217;ora, esfiltrando dati e simulando la cifratura ransomware. Le soluzioni EDR\/XDR e il servizio MDR non hanno bloccato la catena d&#8217;attacco; il SOC non ha generato alcun alert.<\/p>\n    <\/div>\n    <div class=\"exec\">\n      <div class=\"ecard\">\n        <div class=\"k\">Riservatezza<\/div>\n        <div class=\"n red\">Compromessa<\/div>\n        <p>Esfiltrati file di progetto, database SAM, credenziali e dump di memoria attraverso un canale non rilevato.<\/p>\n      <\/div>\n      <div class=\"ecard\">\n        <div class=\"k\">Integrit\u00e0<\/div>\n        <div class=\"n red\">Compromessa<\/div>\n        <p>Esecuzione di codice arbitrario con privilegi <span class=\"mono\">NT AUTHORITY\\SYSTEM<\/span> e successiva scalata a Domain Admin.<\/p>\n      <\/div>\n      <div class=\"ecard\">\n        <div class=\"k\">Disponibilit\u00e0<\/div>\n        <div class=\"n red\">A rischio<\/div>\n        <p>Simulazione ransomware eseguita con successo su una share condivisa isolata: cifratura completa, nessun blocco.<\/p>\n      <\/div>\n    <\/div>\n    <a class=\"exec-cta\" href=\"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/sintesi-per-il-board\/\">\n      <div class=\"tx\">\n        <b>Ti serve la versione per il board?<\/b>\n        <span>Apri la Sintesi Executive: una pagina, senza tecnicismi \u2014 verdetto, impatto sul business e decisioni.<\/span>\n      <\/div>\n      <span class=\"go\">Sintesi per il board <svg viewBox=\"0 0 24 24\"><path d=\"M3 8h10M9 4l4 4-4 4\"\/><\/svg><\/span>\n    <\/a>\n    <p class=\"dim\" style=\"margin-top:24px;font-size:.9rem;max-width:80ch\">Nota: nel test reale la simulazione ransomware viene condotta esclusivamente su un volume di prova dedicato e concordato, senza alcun impatto sui dati di produzione del cliente.<\/p>\n  <\/div>\n<\/section>\n\n<!-- ================= SCOPE + SEVERITY ================= -->\n<section id=\"scope\">\n  <span class=\"secnum\">02<\/span>\n  <div class=\"wrap\">\n    <div class=\"sh\">\n      <span class=\"eyebrow\">Ambito, regole d&#8217;ingaggio e severit\u00e0<\/span>\n      <h2>Come \u00e8 stata condotta la simulazione<\/h2>\n      <p>La prova riproduce lo scenario pi\u00f9 realistico e pi\u00f9 temuto: un attaccante che \u00e8 <b style=\"color:var(--muted);font-weight:600\">gi\u00e0 dentro<\/b> \u2014 dopo un phishing riuscito, un dispositivo compromesso o per mano di un insider \u2014 e parte da una normale postazione con un utente di dominio privo di privilegi. Da l\u00ec misuriamo <b style=\"color:var(--muted);font-weight:600\">fin dove riesce ad arrivare<\/b> e, soprattutto, <b style=\"color:var(--muted);font-weight:600\">cosa la difesa riesce a vedere e a fermare<\/b>.<\/p>\n    <\/div>\n    <div class=\"scope-grid\">\n      <div><span>Tipo di attivit\u00e0<\/span><b>Data Breach Resilience Test<\/b><\/div>\n      <div><span>Prospettiva<\/span><b>Attaccante interno autenticato<\/b><\/div>\n      <div><span>Perimetro<\/span><b>1 postazione + dominio (esempio)<\/b><\/div>\n      <div><span>Ambiente<\/span><b>Rete LAN \u00b7 segmento uffici<\/b><\/div>\n      <div><span>Punto di partenza<\/span><b>Utente di dominio standard<\/b><\/div>\n      <div><span>Strumenti<\/span><b>Toolkit proprietario Cyberfero \u00b7 tecniche manuali<\/b><\/div>\n    <\/div>\n    <div class=\"scope2\">\n      <div class=\"scopebox in\">\n        <b>Incluso nel perimetro<\/b>\n        <ul>\n          <li>Bypass dei controlli endpoint (antivirus, EDR\/XDR) e del servizio MDR<\/li>\n          <li>Impianto di malware, canale di comando e controllo, esfiltrazione dati<\/li>\n          <li>Escalation dei privilegi e movimento verso il dominio<\/li>\n          <li>Verifica della capacit\u00e0 di rilevamento e risposta di MDR e SOC<\/li>\n          <li>Simulazione ransomware su un volume di prova dedicato<\/li>\n        <\/ul>\n      <\/div>\n      <div class=\"scopebox out\">\n        <b>Limitazioni e regole d&#8217;ingaggio<\/b>\n        <ul>\n          <li>Nessun impatto sui dati e sui sistemi di produzione<\/li>\n          <li>Cifratura eseguita solo su un volume isolato e concordato<\/li>\n          <li>Attivit\u00e0 autorizzata per iscritto e circoscritta al perimetro condiviso<\/li>\n          <li>Nessuna interruzione dei servizi n\u00e9 esfiltrazione di dati reali<\/li>\n          <li>Finestra temporale e referenti concordati prima dell&#8217;avvio<\/li>\n        <\/ul>\n      <\/div>\n    <\/div>\n    <h3 class=\"scope-sub\">Scala di severit\u00e0<\/h3>\n    <div class=\"sev\">\n      <div class=\"s\"><b><i class=\"dot-c\"><\/i>Critico<\/b><span>Impatto critico sul business. Compromissione totale, esfiltrazione o cifratura dei dati, controllo del dominio.<\/span><\/div>\n      <div class=\"s\"><b><i class=\"dot-h\"><\/i>Alto<\/b><span>Bypass di controlli di sicurezza chiave, accesso non autorizzato a informazioni sensibili.<\/span><\/div>\n      <div class=\"s\"><b><i class=\"dot-m\"><\/i>Medio<\/b><span>Vulnerabilit\u00e0 sfruttabile a determinate condizioni, con impatto contenuto.<\/span><\/div>\n      <div class=\"s\"><b><i class=\"dot-l\"><\/i>Basso<\/b><span>Impatto limitato. Pu\u00f2 facilitare fasi successive di un attacco.<\/span><\/div>\n      <div class=\"s\"><b><i class=\"dot-n\"><\/i>Info<\/b><span>Nessun impatto diretto. Osservazione di configurazione o hardening.<\/span><\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ================= RESULTS MATRIX ================= -->\n<section id=\"results\">\n  <span class=\"secnum\">03<\/span>\n  <div class=\"wrap\">\n    <div class=\"sh\">\n      <span class=\"eyebrow\">Assessment overview<\/span>\n      <h2>Riepilogo dei risultati<\/h2>\n      <p><span class=\"mono\" style=\"color:var(--red-lt)\">FAIL<\/span> = l&#8217;attacco ha avuto successo e non \u00e8 stato bloccato. <span class=\"mono\" style=\"color:var(--green-lt)\">PASS<\/span> = la difesa ha rilevato o impedito l&#8217;azione. Le voci con <span class=\"gold\">\u2605<\/span> sono i sei test cardine del servizio.<\/p>\n    <\/div>\n    <div class=\"matrix\">\n      <div class=\"mrow head\"><div>#<\/div><div>Test<\/div><div>EDR\/XDR<\/div><div>MDR\/SOC<\/div><\/div>\n      <div class=\"mrow hi\"><div class=\"no\">01<\/div><div class=\"nm\">Data Breach Exfiltration Test<span class=\"star\">\u2605 CARDINE<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow hi\"><div class=\"no\">02<\/div><div class=\"nm\">Ransomware Test<span class=\"star\">\u2605 CARDINE<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow hi\"><div class=\"no\">03<\/div><div class=\"nm\">Trojan Test &amp; system takeover<span class=\"star\">\u2605 CARDINE<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow hi\"><div class=\"no\">04<\/div><div class=\"nm\">MDR Test<span class=\"star\">\u2605 CARDINE<\/span><\/div><div><span class=\"res na\"><i><\/i>N\/A<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow hi\"><div class=\"no\">05<\/div><div class=\"nm\">SOC Test<span class=\"star\">\u2605 CARDINE<\/span><\/div><div><span class=\"res na\"><i><\/i>N\/A<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow hi\"><div class=\"no\">06<\/div><div class=\"nm\">AV \/ EDR \/ XDR Evasion Test<span class=\"star\">\u2605 CARDINE<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">07<\/div><div class=\"nm\">Bypass Antimalware Scan Interface locale<\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">08<\/div><div class=\"nm\">Bypass Antimalware Scan Interface remoto (via trojan)<\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">09<\/div><div class=\"nm\">Esfiltrazione database SAM<\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">10<\/div><div class=\"nm\">Dump credenziali in memoria<\/div><div><span class=\"res pass\"><i><\/i>PASS<\/span><\/div><div><span class=\"res pass\"><i><\/i>PASS<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">11<\/div><div class=\"nm\">Privilege escalation<\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">12<\/div><div class=\"nm\">Enumerazione Active Directory (LDAP)<\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res pass\"><i><\/i>PASS<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">13<\/div><div class=\"nm\">Estrazione chiave Wi-Fi<\/div><div><span class=\"res na\"><i><\/i>N\/A<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">14<\/div><div class=\"nm\">Esportazione credenziali<\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">15<\/div><div class=\"nm\">Privilege escalation a Domain Admin<\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">16<\/div><div class=\"nm\">Accesso al Domain Controller e alle risorse<\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ================= KILL CHAIN ================= -->\n<section id=\"killchain\">\n  <span class=\"secnum\">04<\/span>\n  <div class=\"wrap\">\n    <div class=\"sh\">\n      <span class=\"eyebrow\">Narrativa dell&#8217;attacco<\/span>\n      <h2>La kill-chain, minuto per minuto<\/h2>\n      <p>Tempi di esempio, misurati dal primo comando eseguito sulla postazione iniziale fino al controllo completo del dominio.<\/p>\n    <\/div>\n    <div class=\"kc\">\n      <div class=\"kstep\"><div class=\"t\"><span class=\"clock\">00:00<\/span><h4>Accesso iniziale<\/h4><span class=\"mi\">ATT&amp;CK \u00b7 TA0001<\/span><\/div><p>Sessione su <span class=\"mono\">WKS-UFF-14<\/span> con l&#8217;utente di dominio <span class=\"mono\">azienda\\m.riva<\/span>. Nessun privilegio amministrativo, EDR e agent MDR attivi e aggiornati.<\/p><\/div>\n      <div class=\"kstep\"><div class=\"t\"><span class=\"clock\">00:20<\/span><h4>Bypass Antimalware Scan Interface ed esecuzione del toolkit<\/h4><span class=\"mi\">ATT&amp;CK \u00b7 TA0005<\/span><\/div><p>Disattivazione in memoria del controllo Antimalware Scan Interface ed esecuzione del loader proprietario. L&#8217;EDR non genera detection.<\/p><\/div>\n      <div class=\"kstep\"><div class=\"t\"><span class=\"clock\">00:48<\/span><h4>Impianto del trojan e canale C2<\/h4><span class=\"mi\">ATT&amp;CK \u00b7 TA0011<\/span><\/div><p>Connessione stealth verso il server dell&#8217;operatore. Il canale supera i controlli di rete e non viene segnalato dal SOC.<\/p><\/div>\n      <div class=\"kstep\"><div class=\"t\"><span class=\"clock\">01:35<\/span><h4>Esfiltrazione dei dati<\/h4><span class=\"mi\">ATT&amp;CK \u00b7 TA0010<\/span><\/div><p>Estrazione di file di progetto, database SAM e dump di memoria attraverso il canale del trojan.<\/p><\/div>\n      <div class=\"kstep\"><div class=\"t\"><span class=\"clock\">02:34<\/span><h4>Privilege escalation<\/h4><span class=\"mi\">ATT&amp;CK \u00b7 TA0004<\/span><\/div><p>Abuso di un servizio locale vulnerabile per ottenere <span class=\"mono\">NT AUTHORITY\\SYSTEM<\/span> sulla postazione.<\/p><\/div>\n      <div class=\"kstep\"><div class=\"t\"><span class=\"clock\">03:29<\/span><h4>Enumerazione del dominio<\/h4><span class=\"mi\">ATT&amp;CK \u00b7 TA0007<\/span><\/div><p>Mappatura di Active Directory e dei percorsi di attacco verso gli account privilegiati.<\/p><\/div>\n      <div class=\"kstep\"><div class=\"t\"><span class=\"clock\">04:41<\/span><h4>Domain Admin &amp; controllo del DC<\/h4><span class=\"mi\">ATT&amp;CK \u00b7 TA0004<\/span><\/div><p>Estrazione delle credenziali privilegiate e accesso completo al Domain Controller e alle risorse.<\/p><\/div>\n      <div class=\"kstep\" style=\"padding-bottom:0\"><div class=\"t\"><span class=\"clock\">05:18<\/span><h4>Simulazione ransomware<\/h4><span class=\"mi\">ATT&amp;CK \u00b7 TA0040<\/span><\/div><p>Cifratura completa di una share di prova isolata. Nessun blocco, nessun alert generato durante l&#8217;intera catena.<\/p><\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ================= FINDINGS ================= -->\n<section id=\"findings\">\n  <span class=\"secnum\">05<\/span>\n  <div class=\"wrap\">\n    <div class=\"sh\">\n      <span class=\"eyebrow\">Finding dettagliati \u00b7 con Proof of Concept<\/span>\n      <h2>I sei test cardine<\/h2>\n      <p>Per ciascun test cardine: descrizione, impatto, evidenza dimostrativa e mitigazione. Le evidenze mostrate sono ricostruzioni illustrative con dati fittizi.<\/p>\n    <\/div>\n\n    <!-- F1 Exfiltration -->\n    <div class=\"finding\">\n      <div class=\"fh\">\n        <div class=\"fid\">F-01<\/div>\n        <div class=\"ft\"><h3>Data Breach Exfiltration Test<\/h3><div class=\"sub\">Esfiltrazione di file e credenziali attraverso il canale del trojan, non rilevata dalla difesa.<\/div><\/div>\n        <div class=\"badges\"><span class=\"pill crit\">Impatto: Critico<\/span><span class=\"pill high\">Rischio: Critico<\/span><span class=\"pill mi\">DLP assente<\/span><\/div>\n      <\/div>\n      <div class=\"fb\">\n        <div>\n          <h5>Descrizione<\/h5>\n          <p>Una volta stabilito il canale di comando e controllo, il team ha trasferito verso un server esterno file di progetto, il database SAM locale e artefatti di sistema. Il traffico non \u00e8 stato riconosciuto come esfiltrazione n\u00e9 dalla rete n\u00e9 dall&#8217;MDR.<\/p>\n          <div class=\"term\">\n            <div class=\"bar\"><span class=\"d d1\"><\/span><span class=\"d d2\"><\/span><span class=\"d d3\"><\/span><span>cf-toolkit \u2014 exfil channel (esempio)<\/span><\/div>\n<pre><span class=\"p\">operator@cf-lab<\/span>:<span class=\"c\">~\/dbrt<\/span>$ <span class=\"g\">cf-exfil<\/span> --target WKS-UFF-14 --pull \"\\Progetti\\*.step\"\n<span class=\"o\">[i]<\/span> canale C2 attivo \u00b7 cifratura AES-256 \u00b7 chunk 64 KB\n<span class=\"o\">[i]<\/span> raccolta: 214 file \u00b7 1.87 GB\n  <span class=\"ok\">\u2713<\/span> Progetti\\Linea-A\\stampo_v7.step\n  <span class=\"ok\">\u2713<\/span> Progetti\\Contratti\\fornitura-2026.pdf\n  <span class=\"ok\">\u2713<\/span> Windows\\System32\\config\\SAM\n<span class=\"ok\">[+] trasferimento completato in 3m 12s \u2014 0 alert rilevati<\/span><\/pre>\n          <\/div>\n          <div class=\"shot-cap\"><i><\/i>Evidenza dimostrativa \u00b7 output ricostruito con dati fittizi<\/div>\n        <\/div>\n        <div>\n          <dl class=\"kv\">\n            <dt>Vettore<\/dt><dd>Canale C2 del trojan<\/dd>\n            <dt>Dati (esempio)<\/dt><dd>Progetti CAD, contratti, SAM<\/dd>\n            <dt>Rilevato da<\/dt><dd class=\"red\">Nessun controllo<\/dd>\n            <dt>ATT&amp;CK<\/dt><dd>T1041 \u00b7 Exfiltration over C2<\/dd>\n          <\/dl>\n          <div class=\"miti\">\n            <b>Mitigazione<\/b>\n            <ul>\n              <li>Implementare una soluzione DLP con ispezione dei canali in uscita<\/li>\n              <li>Segmentare la rete e limitare le connessioni verso host esterni<\/li>\n              <li>Attivare regole di detection su volumi e destinazioni anomale<\/li>\n            <\/ul>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n\n    <!-- F2 Ransomware -->\n    <div class=\"finding\">\n      <div class=\"fh\">\n        <div class=\"fid\">F-02<\/div>\n        <div class=\"ft\"><h3>Ransomware Test<\/h3><div class=\"sub\">Cifratura completa di una share di prova isolata, senza blocco n\u00e9 rollback.<\/div><\/div>\n        <div class=\"badges\"><span class=\"pill crit\">Impatto: Critico<\/span><span class=\"pill high\">Rischio: Critico<\/span><span class=\"pill mi\">Anti-ransomware assente<\/span><\/div>\n      <\/div>\n      <div class=\"fb\">\n        <div>\n          <h5>Descrizione<\/h5>\n          <p>\u00c8 stato eseguito un simulatore ransomware su un volume dedicato e concordato. Il processo ha cifrato l&#8217;intero contenuto senza essere interrotto da EDR\/XDR, e senza generare alcuna azione di contenimento da parte dell&#8217;MDR.<\/p>\n          <div class=\"term\">\n            <div class=\"bar\"><span class=\"d d1\"><\/span><span class=\"d d2\"><\/span><span class=\"d d3\"><\/span><span>cf-toolkit \u2014 ransomware simulation (volume di prova)<\/span><\/div>\n<pre><span class=\"p\">operator@cf-lab<\/span>:<span class=\"c\">~\/dbrt<\/span>$ <span class=\"g\">cf-rw-sim<\/span> --path Z:\\LAB-ISOLATO --ext .azienda-lock\n<span class=\"o\">[i]<\/span> modalit\u00e0 SIMULAZIONE \u00b7 solo volume di prova\n<span class=\"o\">[i]<\/span> enumerati 4.812 file \u00b7 22.4 GB\n<span class=\"r\">[!]<\/span> cifratura in corso... ############################ 100%\n<span class=\"r\">[!]<\/span> nota di riscatto scritta: LEGGIMI_AZIENDA.txt\n<span class=\"ok\">[+] 4.812 file cifrati in 6m 04s \u2014 EDR: nessuna azione \u00b7 MDR: nessun contenimento<\/span><\/pre>\n          <\/div>\n          <div class=\"shot-cap\"><i><\/i>Evidenza dimostrativa \u00b7 eseguito solo su volume isolato di test<\/div>\n        <\/div>\n        <div>\n          <dl class=\"kv\">\n            <dt>Bersaglio<\/dt><dd>Volume di prova Z:\\LAB-ISOLATO<\/dd>\n            <dt>File (esempio)<\/dt><dd>4.812 cifrati<\/dd>\n            <dt>Rilevato da<\/dt><dd class=\"red\">Nessun controllo<\/dd>\n            <dt>ATT&amp;CK<\/dt><dd>T1486 \u00b7 Data Encrypted for Impact<\/dd>\n          <\/dl>\n          <div class=\"miti\">\n            <b>Mitigazione<\/b>\n            <ul>\n              <li>Adottare una soluzione anti-ransomware con rilevamento comportamentale<\/li>\n              <li>Backup immutabili e testati, con ripristino verificato<\/li>\n              <li>Regole di blocco su cifratura massiva di file<\/li>\n            <\/ul>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n\n    <!-- F3 Trojan takeover -->\n    <div class=\"finding\">\n      <div class=\"fh\">\n        <div class=\"fid\">F-03<\/div>\n        <div class=\"ft\"><h3>Trojan Test &amp; system takeover<\/h3><div class=\"sub\">Impianto di un trojan personalizzato e presa di controllo della postazione fino ai privilegi massimi.<\/div><\/div>\n        <div class=\"badges\"><span class=\"pill crit\">Impatto: Critico<\/span><span class=\"pill high\">Rischio: Critico<\/span><span class=\"pill mi\">Execution non filtrata<\/span><\/div>\n      <\/div>\n      <div class=\"fb\">\n        <div>\n          <h5>Descrizione<\/h5>\n          <p>Uno script o eseguibile costruito su misura ha stabilito una connessione stealth con l&#8217;operatore, importato codice aggiuntivo ed eseguito comandi arbitrari. Combinato con l&#8217;abuso di un servizio locale vulnerabile, ha permesso l&#8217;esecuzione con privilegi massimi.<\/p>\n          <div class=\"term\">\n            <div class=\"bar\"><span class=\"d d1\"><\/span><span class=\"d d2\"><\/span><span class=\"d d3\"><\/span><span>cf-toolkit \u2014 implant &amp; privesc (esempio)<\/span><\/div>\n<pre><span class=\"p\">operator@cf-lab<\/span>:<span class=\"c\">~\/dbrt<\/span>$ <span class=\"g\">cf-implant<\/span> --deliver azienda_update.exe --stealth\n<span class=\"o\">[i]<\/span> beacon ricevuto da WKS-UFF-14 \u00b7 utente: azienda\\m.riva\n<span class=\"o\">[i]<\/span> Antimalware Scan Interface: bypassato \u00b7 AV\/EDR: nessuna detection\n<span class=\"p\">beacon><\/span> <span class=\"c\">getsystem<\/span>  <span class=\"o\"># abuso servizio \"AziendaAgentSvc\"<\/span>\n<span class=\"ok\">[+] elevato a NT AUTHORITY\\SYSTEM<\/span>\n<span class=\"p\">beacon><\/span> <span class=\"c\">whoami<\/span>\nnt authority\\system<\/pre>\n          <\/div>\n          <div class=\"shot-cap\"><i><\/i>Evidenza dimostrativa \u00b7 nomi e host fittizi<\/div>\n        <\/div>\n        <div>\n          <dl class=\"kv\">\n            <dt>Payload<\/dt><dd>Trojan proprietario (esempio)<\/dd>\n            <dt>Privilegi<\/dt><dd>utente \u2192 SYSTEM<\/dd>\n            <dt>Rilevato da<\/dt><dd class=\"red\">Nessun controllo<\/dd>\n            <dt>ATT&amp;CK<\/dt><dd>T1204 \u00b7 T1543 \u00b7 T1068<\/dd>\n          <\/dl>\n          <div class=\"miti\">\n            <b>Mitigazione<\/b>\n            <ul>\n              <li>Application allow-listing \/ approccio Zero-Trust sull&#8217;esecuzione<\/li>\n              <li>Rimozione dei permessi deboli sui servizi locali<\/li>\n              <li>Hardening dell&#8217;EDR e blocco dell&#8217;esecuzione da percorsi utente<\/li>\n            <\/ul>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n\n    <!-- F4 MDR -->\n    <div class=\"finding\">\n      <div class=\"fh\">\n        <div class=\"fid\">F-04<\/div>\n        <div class=\"ft\"><h3>MDR Test<\/h3><div class=\"sub\">Il servizio di Managed Detection &amp; Response non ha rilevato n\u00e9 contenuto la catena d&#8217;attacco.<\/div><\/div>\n        <div class=\"badges\"><span class=\"pill crit\">Impatto: Critico<\/span><span class=\"pill high\">Rischio: Critico<\/span><span class=\"pill mi\">Nessun contenimento<\/span><\/div>\n      <\/div>\n      <div class=\"fb\">\n        <div>\n          <h5>Descrizione<\/h5>\n          <p>Durante l&#8217;intera attivit\u00e0 \u2014 bypass dell&#8217;Antimalware Scan Interface, impianto del trojan, esfiltrazione, escalation e ransomware \u2014 il servizio MDR non ha isolato l&#8217;host n\u00e9 notificato l&#8217;incidente. Il tempo di risposta atteso (contenimento entro pochi minuti) non \u00e8 stato rispettato.<\/p>\n          <div class=\"term\">\n            <div class=\"bar\"><span class=\"d d1\"><\/span><span class=\"d d2\"><\/span><span class=\"d d3\"><\/span><span>timeline MDR \u2014 attesa vs reale (esempio)<\/span><\/div>\n<pre><span class=\"o\">evento<\/span>                                  <span class=\"o\">atteso<\/span>       <span class=\"o\">reale<\/span>\nbypass Antimalware Scan Interface       alert &lt;2m    <span class=\"r\">nessuno<\/span>\nbeacon C2 in uscita                     alert &lt;2m    <span class=\"r\">nessuno<\/span>\nprivilege escalation                    isolamento   <span class=\"r\">nessuno<\/span>\ncifratura massiva                       blocco       <span class=\"r\">nessuno<\/span>\n<span class=\"r\">[!] host mai isolato \u00b7 incidente mai aperto<\/span><\/pre>\n          <\/div>\n          <div class=\"shot-cap\"><i><\/i>Confronto illustrativo tra SLA atteso ed esito osservato<\/div>\n        <\/div>\n        <div>\n          <dl class=\"kv\">\n            <dt>Copertura<\/dt><dd>MDR 24\/7 (esempio)<\/dd>\n            <dt>Host isolati<\/dt><dd class=\"red\">0<\/dd>\n            <dt>Incidenti aperti<\/dt><dd class=\"red\">0<\/dd>\n            <dt>Esito<\/dt><dd class=\"red\">FAIL<\/dd>\n          <\/dl>\n          <div class=\"miti\">\n            <b>Mitigazione<\/b>\n            <ul>\n              <li>Rivedere playbook e soglie di detection con il provider MDR<\/li>\n              <li>Definire e testare periodicamente gli SLA di isolamento<\/li>\n              <li>Introdurre esercitazioni purple team ricorrenti<\/li>\n            <\/ul>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n\n    <!-- F5 SOC -->\n    <div class=\"finding\">\n      <div class=\"fh\">\n        <div class=\"fid\">F-05<\/div>\n        <div class=\"ft\"><h3>SOC Test<\/h3><div class=\"sub\">Nessun alert generato dal Security Operations Center durante tutta la simulazione.<\/div><\/div>\n        <div class=\"badges\"><span class=\"pill crit\">Impatto: Critico<\/span><span class=\"pill high\">Rischio: Alto<\/span><span class=\"pill mi\">Visibilit\u00e0 insufficiente<\/span><\/div>\n      <\/div>\n      <div class=\"fb\">\n        <div>\n          <h5>Descrizione<\/h5>\n          <p>Gli eventi rilevanti \u2014 logon anomali, creazione di servizi, query LDAP massive, traffico verso host sconosciuti \u2014 non si sono tradotti in alcun alert correlato. La telemetria necessaria risultava parziale o non inoltrata al SIEM.<\/p>\n          <div class=\"term\">\n            <div class=\"bar\"><span class=\"d d1\"><\/span><span class=\"d d2\"><\/span><span class=\"d d3\"><\/span><span>SIEM \u2014 ricerca alert finestra test (esempio)<\/span><\/div>\n<pre><span class=\"p\">soc@azienda<\/span>:<span class=\"c\">~<\/span>$ <span class=\"g\">siem-query<\/span> --window \"2026-04-17 09:00\u219210:00\" --sev high\n<span class=\"o\">[i]<\/span> sorgenti interrogate: EDR, DC, firewall, proxy\n<span class=\"o\">[i]<\/span> alert severit\u00e0 alta\/critica: <span class=\"r\">0<\/span>\n<span class=\"o\">[i]<\/span> eventi LDAP massivi non correlati: 1 (non allertato)\n<span class=\"r\">[!] nessun caso creato durante la finestra di attacco<\/span><\/pre>\n          <\/div>\n          <div class=\"shot-cap\"><i><\/i>Ricostruzione illustrativa \u00b7 nessun dato reale<\/div>\n        <\/div>\n        <div>\n          <dl class=\"kv\">\n            <dt>Alert critici<\/dt><dd class=\"red\">0<\/dd>\n            <dt>Casi aperti<\/dt><dd class=\"red\">0<\/dd>\n            <dt>Telemetria<\/dt><dd>parziale<\/dd>\n            <dt>ATT&amp;CK<\/dt><dd>Detection gap trasversale<\/dd>\n          <\/dl>\n          <div class=\"miti\">\n            <b>Mitigazione<\/b>\n            <ul>\n              <li>Completare l&#8217;inoltro della telemetria (EDR, DC, DNS, proxy) al SIEM<\/li>\n              <li>Creare regole di correlazione sulle tecniche osservate<\/li>\n              <li>Validare le detection con test avversariali periodici<\/li>\n            <\/ul>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n\n    <!-- F6 AV\/EDR\/XDR -->\n    <div class=\"finding\">\n      <div class=\"fh\">\n        <div class=\"fid\">F-06<\/div>\n        <div class=\"ft\"><h3>AV \/ EDR \/ XDR Evasion Test<\/h3><div class=\"sub\">Evasione totale dei controlli endpoint: nessuna delle azioni malevole \u00e8 stata bloccata.<\/div><\/div>\n        <div class=\"badges\"><span class=\"pill crit\">Impatto: Critico<\/span><span class=\"pill high\">Rischio: Critico<\/span><span class=\"pill mi\">Configurazione da rivedere<\/span><\/div>\n      <\/div>\n      <div class=\"fb\">\n        <div>\n          <h5>Descrizione<\/h5>\n          <p>Le tecniche impiegate \u2014 non presenti nelle firme note \u2014 hanno superato antivirus, EDR e XDR sia sul piano statico sia comportamentale. Il risultato indica una configurazione che privilegia la compatibilit\u00e0 rispetto al blocco.<\/p>\n          <div class=\"term\">\n            <div class=\"bar\"><span class=\"d d1\"><\/span><span class=\"d d2\"><\/span><span class=\"d d3\"><\/span><span>cf-toolkit \u2014 evasion check (esempio)<\/span><\/div>\n<pre><span class=\"p\">operator@cf-lab<\/span>:<span class=\"c\">~\/dbrt<\/span>$ <span class=\"g\">cf-evasion<\/span> --suite full\nscansione statica ......... <span class=\"ok\">bypass<\/span>\nanalisi comportamentale ... <span class=\"ok\">bypass<\/span>\nmemory scanning ........... <span class=\"ok\">bypass<\/span>\nblocco esecuzione ......... <span class=\"r\">nessuno<\/span>\n<span class=\"r\">[!] 0 rilevamenti su 9 tecniche eseguite<\/span><\/pre>\n          <\/div>\n          <div class=\"shot-cap\"><i><\/i>Evidenza dimostrativa \u00b7 nessuna tecnica operativa divulgata<\/div>\n        <\/div>\n        <div>\n          <dl class=\"kv\">\n            <dt>Tecniche<\/dt><dd>9 eseguite<\/dd>\n            <dt>Rilevate<\/dt><dd class=\"red\">0<\/dd>\n            <dt>Piani<\/dt><dd>statico + comportamentale<\/dd>\n            <dt>ATT&amp;CK<\/dt><dd>T1562 \u00b7 T1055 \u00b7 T1027<\/dd>\n          <\/dl>\n          <div class=\"miti\">\n            <b>Mitigazione<\/b>\n            <ul>\n              <li>Rivedere la configurazione EDR\/XDR verso una postura di blocco<\/li>\n              <li>Abilitare protezione della memoria e tamper protection<\/li>\n              <li>Ridurre le esclusioni e validarle periodicamente<\/li>\n            <\/ul>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ================= SUPPORTING FINDINGS ================= -->\n<section id=\"supporting\">\n  <span class=\"secnum\">06<\/span>\n  <div class=\"wrap\">\n    <div class=\"sh\">\n      <span class=\"eyebrow\">Test a corredo<\/span>\n      <h2>Finding di supporto<\/h2>\n      <p>Ulteriori azioni che hanno reso possibile o amplificato la compromissione. Ognuna con impatto e mitigazione sintetica.<\/p>\n    <\/div>\n    <div class=\"matrix\">\n      <div class=\"mrow head\"><div>#<\/div><div>Finding<\/div><div>Rischio<\/div><div>Esito<\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">A1<\/div><div class=\"nm\">Bypass Antimalware Scan Interface (locale e remoto) \u2014 nessun blocco all&#8217;esecuzione di script<\/div><div><span class=\"pill crit\" style=\"padding:4px 10px\">Critico<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">A2<\/div><div class=\"nm\">Esfiltrazione database SAM \u2014 segreti locali estratti<\/div><div><span class=\"pill crit\" style=\"padding:4px 10px\">Critico<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">A3<\/div><div class=\"nm\">Dump credenziali in memoria \u2014 tentativo bloccato dalla credential guard<\/div><div><span class=\"pill high\" style=\"padding:4px 10px\">Alto<\/span><\/div><div><span class=\"res pass\"><i><\/i>PASS<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">A4<\/div><div class=\"nm\">Enumerazione Active Directory \u2014 percorsi verso account privilegiati<\/div><div><span class=\"pill high\" style=\"padding:4px 10px\">Alto<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">A5<\/div><div class=\"nm\">Estrazione chiave Wi-Fi \u2014 handshake recuperato<\/div><div><span class=\"pill crit\" style=\"padding:4px 10px\">Critico<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">A6<\/div><div class=\"nm\">Esportazione Secrets<\/div><div><span class=\"pill crit\" style=\"padding:4px 10px\">Critico<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n      <div class=\"mrow\"><div class=\"no\">A7<\/div><div class=\"nm\">Accesso al Domain Controller e alle risorse condivise<\/div><div><span class=\"pill crit\" style=\"padding:4px 10px\">Critico<\/span><\/div><div><span class=\"res fail\"><i><\/i>FAIL<\/span><\/div><\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ================= MITRE ATT&CK ================= -->\n<section id=\"attack\">\n  <span class=\"secnum\">07<\/span>\n  <div class=\"wrap\">\n    <div class=\"sh\">\n      <span class=\"eyebrow\">Mappatura MITRE ATT&amp;CK \u00b7 interattiva<\/span>\n      <h2>La catena d&#8217;attacco sulla matrice ATT&amp;CK<\/h2>\n      <p>Ogni tecnica osservata durante la simulazione \u00e8 collocata sulla tattica corrispondente. Le celle <span style=\"color:var(--red-lt)\">accese<\/span> sono state eseguite con successo; clicca una tecnica per il dettaglio, l&#8217;evidenza collegata e l&#8217;esito.<\/p>\n    <\/div>\n    <div class=\"attnav\">\n      <div class=\"attscroll\"><div class=\"attgrid\" id=\"attgrid\"><\/div><\/div>\n      <div class=\"attlegend\">\n        <span><i class=\"on\"><\/i>Tecnica eseguita con successo<\/span>\n        <span><i class=\"off\"><\/i>Tecnica non osservata \/ contenuta<\/span>\n        <span style=\"color:var(--gold-lt)\">\u25b8 clicca una cella per il dettaglio<\/span>\n      <\/div>\n      <div class=\"attdetail\" id=\"attdetail\">\n        <p class=\"ph\">Seleziona una tecnica nella matrice per vederne descrizione, evidenza collegata ed esito.<\/p>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ================= REMEDIATION ================= -->\n<section id=\"remediation\">\n  <span class=\"secnum\">08<\/span>\n  <div class=\"wrap\">\n    <div class=\"sh\">\n      <span class=\"eyebrow\">Piano di rimedio<\/span>\n      <h2>Cosa fare, e in che ordine<\/h2>\n      <p>Priorit\u00e0 derivate dall&#8217;impatto e dalla facilit\u00e0 di intervento. Non un elenco di buoni propositi, ma azioni con un ordine.<\/p>\n    <\/div>\n    <div class=\"rem\">\n      <div class=\"rcard now\">\n        <div class=\"h\"><b>Ora \u00b7 0\u20137 giorni<\/b><span class=\"tag\">Contenimento<\/span><\/div>\n        <ul>\n          <li>Riconfigurare EDR\/XDR in modalit\u00e0 di blocco e ridurre le esclusioni<\/li>\n          <li>Abilitare tamper e memory protection<\/li>\n          <li>Rivedere con il provider MDR gli SLA di isolamento<\/li>\n          <li>Rimuovere le credenziali locali per l&#8217;autenticazione<\/li>\n        <\/ul>\n      <\/div>\n      <div class=\"rcard soon\">\n        <div class=\"h\"><b>Presto \u00b7 10\u201320 giorni<\/b><span class=\"tag\">Riduzione rischio<\/span><\/div>\n        <ul>\n          <li>Introdurre application allow-listing \/ Zero-Trust<\/li>\n          <li>Implementare DLP e segmentazione della rete<\/li>\n          <li>Adottare anti-ransomware comportamentale e backup immutabili<\/li>\n          <li>Completare l&#8217;inoltro della telemetria al SIEM<\/li>\n        <\/ul>\n      <\/div>\n      <div class=\"rcard plan\">\n        <div class=\"h\"><b>Programma \u00b7 20+ giorni<\/b><span class=\"tag\">Resilienza<\/span><\/div>\n        <ul>\n          <li>Hardening di Active Directory e tiering degli account privilegiati<\/li>\n          <li>Migrazione a Wi-Fi WPA2\/3 Enterprise<\/li>\n          <li>Esercitazioni purple team ricorrenti<\/li>\n          <li>Ripetere la Data Breach Resilience Test dopo la remediation<\/li>\n        <\/ul>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ================= CTA ================= -->\n<section id=\"cta\" style=\"border-top:none\">\n  <div class=\"wrap\">\n    <div class=\"cta\">\n      <span class=\"eyebrow\" style=\"justify-content:center\">Questo \u00e8 un esempio<\/span>\n      <h2>Il vostro report sarebbe sulla vostra rete reale.<\/h2>\n      <p>Il Data Breach Resilience Test verifica sul campo se le vostre difese reggono a un attacco vero, in ambiente controllato e senza rischi per l&#8217;operativit\u00e0. Al termine ricevete un report come questo, sui vostri sistemi.<\/p>\n      <div class=\"btnrow\">\n        <a class=\"btn btn-gold\" href=\"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/\">Scopri il Data Breach Resilience Test\n          <svg viewBox=\"0 0 16 16\" fill=\"none\"><path d=\"M3 8h10M9 4l4 4-4 4\" stroke=\"currentColor\" stroke-width=\"1.7\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg><\/a>\n        <a class=\"btn btn-ghost\" href=\"mailto:info@cyberfero.com?subject=Data%20Breach%20Resilience%20Test%20-%20Richiesta%20informazioni\">Richiedi informazioni<\/a>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<div class=\"rfoot\">\n  <div class=\"wrap\">\n    <div class=\"lg\">CYBER<span>FERO<\/span><\/div>\n    <div class=\"docref\">Cyberfero S.r.l. \u00b7 Reggio Emilia \u00b7 <a href=\"mailto:info@cyberfero.com\" style=\"color:var(--blue-lt)\">info@cyberfero.com<\/a><\/div>\n  <\/div>\n  <div class=\"wrap\">\n    <p class=\"legal\"><b style=\"color:var(--gold-lt)\">Documento di esempio.<\/b> Questo report \u00e8 un fac-simile dimostrativo del deliverable del servizio Data Breach Resilience Test di Cyberfero. L&#8217;azienda cliente, gli host, gli indirizzi, gli utenti, le credenziali, i tempi e i risultati riportati sono <b>interamente fittizi<\/b> e non si riferiscono ad alcuna organizzazione reale. Le evidenze tecniche (terminali, output, tabelle) sono ricostruzioni illustrative e non contengono tecniche operative riproducibili. Il servizio reale \u00e8 un&#8217;attivit\u00e0 di analisi tecnico-organizzativa condotta previa autorizzazione scritta del cliente e in ambiente concordato. \u00a9 <span id=\"yr\">2026<\/span> Cyberfero S.r.l. \u2014 Tutti i diritti riservati.<\/p>\n  <\/div>\n<\/div>\n<script>\nvar _yr=document.getElementById(\"yr\");if(_yr){_yr.textContent=new Date().getFullYear();}\n\n\/* ===== Matrice MITRE ATT&CK interattiva (dati di esempio) ===== *\/\n(function(){\n  var TACT=[\n    [\"TA0001\",\"Initial Access\",\"Accesso iniziale\"],\n    [\"TA0002\",\"Execution\",\"Esecuzione\"],\n    [\"TA0003\",\"Persistence\",\"Persistenza\"],\n    [\"TA0004\",\"Privilege Escalation\",\"Escalation privilegi\"],\n    [\"TA0005\",\"Defense Evasion\",\"Evasione difese\"],\n    [\"TA0006\",\"Credential Access\",\"Accesso credenziali\"],\n    [\"TA0007\",\"Discovery\",\"Ricognizione\"],\n    [\"TA0008\",\"Lateral Movement\",\"Movimento laterale\"],\n    [\"TA0010\",\"Exfiltration\",\"Esfiltrazione\"],\n    [\"TA0040\",\"Impact\",\"Impatto\"]\n  ];\n  var T=[\n    {id:\"T1078\",n:\"Valid Accounts\",ta:\"TA0001\",on:1,res:\"fail\",fnd:\"Kill-chain \u00b7 00:00\",d:\"Accesso iniziale con un account di dominio valido e standard sulla postazione WKS-UFF-14, senza privilegi amministrativi.\"},\n    {id:\"T1059\",n:\"Command &amp; Scripting Interpreter\",ta:\"TA0002\",on:1,res:\"fail\",fnd:\"F-03 \u00b7 Trojan\",d:\"Esecuzione di comandi e script tramite il toolkit dopo il bypass dell'Antimalware Scan Interface. Nessun filtro all'esecuzione.\"},\n    {id:\"T1204\",n:\"User Execution\",ta:\"TA0002\",on:1,res:\"fail\",fnd:\"F-03 \u00b7 Trojan\",d:\"Esecuzione di un eseguibile costruito su misura, non riconosciuto da AV\/EDR.\"},\n    {id:\"T1543\",n:\"Create\/Modify System Process\",ta:\"TA0003\",on:1,res:\"fail\",fnd:\"F-03 \u00b7 Trojan\",d:\"Abuso di un servizio locale vulnerabile per mantenere l'accesso ed elevare i privilegi.\"},\n    {id:\"T1053\",n:\"Scheduled Task\/Job\",ta:\"TA0003\",on:0,res:\"\",fnd:\"\",d:\"Tecnica di persistenza non necessaria in questo scenario: non osservata.\"},\n    {id:\"T1068\",n:\"Exploitation for Privilege Escalation\",ta:\"TA0004\",on:1,res:\"fail\",fnd:\"F-03 \u00b7 Kill-chain 02:34\",d:\"Sfruttamento di un servizio locale per ottenere privilegi NT AUTHORITY\\\\SYSTEM sulla postazione.\"},\n    {id:\"T1562\",n:\"Impair Defenses\",ta:\"TA0005\",on:1,res:\"fail\",fnd:\"F-06 \u00b7 Evasione\",d:\"Disattivazione in memoria dell'Antimalware Scan Interface e aggiramento dei controlli endpoint.\"},\n    {id:\"T1027\",n:\"Obfuscated Files or Information\",ta:\"TA0005\",on:1,res:\"fail\",fnd:\"F-06 \u00b7 Evasione\",d:\"Payload offuscati non riconosciuti dall'analisi statica dei controlli endpoint.\"},\n    {id:\"T1055\",n:\"Process Injection\",ta:\"TA0005\",on:1,res:\"fail\",fnd:\"F-06 \u00b7 Evasione\",d:\"Iniezione in processi legittimi per superare l'analisi comportamentale.\"},\n    {id:\"T1003\",n:\"OS Credential Dumping\",ta:\"TA0006\",on:1,res:\"fail\",fnd:\"A2 \u00b7 SAM\",d:\"Estrazione del database SAM e dei segreti locali. Il dump delle credenziali in memoria \u00e8 stato invece contenuto dalla credential guard.\"},\n    {id:\"T1555\",n:\"Credentials from Password Stores\",ta:\"TA0006\",on:1,res:\"fail\",fnd:\"A6 \u00b7 Secrets\",d:\"Estrazione di credenziali e segreti privilegiati dagli archivi di sistema per l'accesso al dominio.\"},\n    {id:\"T1069\",n:\"Permission Groups Discovery\",ta:\"TA0007\",on:1,res:\"fail\",fnd:\"A4 \u00b7 Enum AD\",d:\"Enumerazione di Active Directory e mappatura dei percorsi verso gli account privilegiati.\"},\n    {id:\"T1018\",n:\"Remote System Discovery\",ta:\"TA0007\",on:1,res:\"fail\",fnd:\"Kill-chain \u00b7 03:29\",d:\"Individuazione di Domain Controller e sistemi chiave della rete.\"},\n    {id:\"T1021\",n:\"Remote Services\",ta:\"TA0008\",on:1,res:\"fail\",fnd:\"A7 \u00b7 DC access\",d:\"Movimento laterale verso il Domain Controller e le risorse condivise con il ticket privilegiato.\"},\n    {id:\"T1041\",n:\"Exfiltration Over C2 Channel\",ta:\"TA0010\",on:1,res:\"fail\",fnd:\"F-01 \u00b7 Exfiltration\",d:\"Trasferimento di file di progetto e credenziali verso un server esterno tramite il canale del trojan, non rilevato.\"},\n    {id:\"T1486\",n:\"Data Encrypted for Impact\",ta:\"TA0040\",on:1,res:\"fail\",fnd:\"F-02 \u00b7 Ransomware\",d:\"Simulazione ransomware su un volume di prova isolato: cifratura completa senza blocco n\u00e9 alert.\"}\n  ];\n  var grid=document.getElementById(\"attgrid\"), det=document.getElementById(\"attdetail\");\n  if(!grid) return;\n  var tacName={}; TACT.forEach(function(t){tacName[t[0]]=t[1]+\" \u00b7 \"+t[2];});\n  TACT.forEach(function(t){\n    var col=document.createElement(\"div\"); col.className=\"attcol\";\n    var h=document.createElement(\"div\"); h.className=\"att-h\";\n    h.innerHTML='<b>'+t[2]+'<\/b><span class=\"ta\">'+t[0]+'<\/span>';\n    col.appendChild(h);\n    T.filter(function(x){return x.ta===t[0];}).forEach(function(x){\n      var c=document.createElement(\"div\");\n      c.className=\"attcell \"+(x.on?\"on\":\"off\");\n      c.innerHTML='<div class=\"id\">'+x.id+'<\/div><div class=\"nm\">'+x.n+'<\/div>';\n      if(x.on){\n        c.addEventListener(\"click\",function(){\n          [].forEach.call(grid.querySelectorAll(\".attcell.sel\"),function(e){e.classList.remove(\"sel\");});\n          c.classList.add(\"sel\");\n          det.innerHTML='<div class=\"dh\"><span class=\"id\">'+x.id+'<\/span><h4>'+x.n+'<\/h4>'+\n            '<span class=\"tac\">'+tacName[x.ta]+'<\/span><\/div>'+\n            '<p>'+x.d+'<\/p>'+\n            '<div class=\"meta\"><span>Evidenza: '+x.fnd+'<\/span><span class=\"res-'+x.res+'\">Esito difesa: '+(x.res===\"fail\"?\"FAIL\":\"PASS\")+'<\/span><\/div>';\n          det.scrollIntoView({behavior:\"smooth\",block:\"nearest\"});\n        });\n      }\n      col.appendChild(c);\n    });\n    grid.appendChild(col);\n  });\n})();\n<\/script>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>Report di esempio Documento dimostrativo. Azienda, host, indirizzi, credenziali e risultati sono completamente fittizi e non si riferiscono ad alcun cliente reale. \u2605 Sintesi per il board \u2190 Torna al servizio CYBERFEROData Breach Resilience Test DATA BREACH RESILIENCE TEST Rif. CF-DBRT-2026-0417 \u00b7 Rev. 1.0 \u00b7 Classificazione: Confidenziale (esempio) Esito complessivo \u00b7 CRITICO Data BreachResilience Test Simulazione di attacco reale in&#8230;<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":20792,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"class_list":["post-20793","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Report di esempio \u2013 Data Breach Resilience Test | Cyberfero<\/title>\n<meta name=\"description\" content=\"Esempio dimostrativo di report tecnico del Data Breach Resilience Test di Cyberfero. Dati e risultati completamente fittizi.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data Breach Resilience Test \u2013 Report di esempio\" \/>\n<meta property=\"og:description\" content=\"Esempio dimostrativo di report tecnico del Data Breach Resilience Test di Cyberfero. Dati e risultati completamente fittizi.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyberfero\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Cyberfero\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cyberfero.com\/wp-content\/uploads\/2024\/05\/Color-logo-no-background.png\" \/>\n\t<meta property=\"og:image:width\" content=\"3163\" \/>\n\t<meta property=\"og:image:height\" content=\"922\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@secureod\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/\",\"url\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/\",\"name\":\"Report di esempio \u2013 Data Breach Resilience Test | Cyberfero\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/#website\"},\"datePublished\":\"2026-09-15T09:26:22+00:00\",\"description\":\"Esempio dimostrativo di report tecnico del Data Breach Resilience Test di Cyberfero. Dati e risultati completamente fittizi.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerability Assessment e Penetration test\",\"item\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Data Breach Resilience Test\",\"item\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Data Breach Resilience Test \u2013 Report di esempio\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/#website\",\"url\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/\",\"name\":\"Cyberfero\",\"description\":\"Managed Security Service Provider\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":[\"Organization\",\"Place\",\"ProfessionalService\"],\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/#organization\",\"name\":\"Cyberfero s.r.l.\",\"url\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/\",\"logo\":{\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/#local-main-organization-logo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/#local-main-organization-logo\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Cyberfero\",\"https:\\\/\\\/x.com\\\/secureod\",\"https:\\\/\\\/www.instagram.com\\\/cyber_fero\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/cyberfero\",\"http:\\\/\\\/www.pinterest.com\\\/cyberfero\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/secureod\"],\"address\":{\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/#local-main-place-address\"},\"telephone\":[\"+39 0522 1685330\"],\"openingHoursSpecification\":[{\"@type\":\"OpeningHoursSpecification\",\"dayOfWeek\":[\"Monday\",\"Tuesday\",\"Wednesday\",\"Thursday\",\"Friday\"],\"opens\":\"09:00\",\"closes\":\"18:30\"},{\"@type\":\"OpeningHoursSpecification\",\"dayOfWeek\":[\"Saturday\",\"Sunday\"],\"opens\":\"00:00\",\"closes\":\"00:00\"}],\"email\":\"info@cyberfero.com\",\"faxNumber\":\"+39 0522 015371\",\"areaServed\":\"Italia\",\"vatID\":\"03058120357\",\"taxID\":\"03058120357\",\"priceRange\":\"$$$\",\"currenciesAccepted\":\"\u20ac\",\"paymentAccepted\":\"paypal, bonifico bancario\"},{\"@type\":\"PostalAddress\",\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/#local-main-place-address\",\"streetAddress\":\"Via Statuto, 3\",\"addressLocality\":\"Reggio Emilia\",\"postalCode\":\"42121\",\"addressRegion\":\"Italia\",\"addressCountry\":\"IT\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.cyberfero.com\\\/it\\\/vulnerability-assessment-e-penetration-test\\\/data-breach-resilience-test\\\/report-di-esempio\\\/#local-main-organization-logo\",\"url\":\"https:\\\/\\\/www.cyberfero.com\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/Color-logo-no-background.png\",\"contentUrl\":\"https:\\\/\\\/www.cyberfero.com\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/Color-logo-no-background.png\",\"width\":3163,\"height\":922,\"caption\":\"Cyberfero s.r.l.\"}]}<\/script>\n<meta name=\"geo.placename\" content=\"Reggio Emilia\" \/>\n<meta name=\"geo.region\" content=\"Italia\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Report di esempio \u2013 Data Breach Resilience Test | Cyberfero","description":"Esempio dimostrativo di report tecnico del Data Breach Resilience Test di Cyberfero. Dati e risultati completamente fittizi.","robots":{"index":"noindex","follow":"follow"},"og_locale":"it_IT","og_type":"article","og_title":"Data Breach Resilience Test \u2013 Report di esempio","og_description":"Esempio dimostrativo di report tecnico del Data Breach Resilience Test di Cyberfero. Dati e risultati completamente fittizi.","og_url":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/","og_site_name":"Cyberfero","article_publisher":"https:\/\/www.facebook.com\/Cyberfero","og_image":[{"width":3163,"height":922,"url":"https:\/\/www.cyberfero.com\/wp-content\/uploads\/2024\/05\/Color-logo-no-background.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_site":"@secureod","twitter_misc":{"Tempo di lettura stimato":"11 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/","url":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/","name":"Report di esempio \u2013 Data Breach Resilience Test | Cyberfero","isPartOf":{"@id":"https:\/\/www.cyberfero.com\/it\/#website"},"datePublished":"2026-09-15T09:26:22+00:00","description":"Esempio dimostrativo di report tecnico del Data Breach Resilience Test di Cyberfero. Dati e risultati completamente fittizi.","breadcrumb":{"@id":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cyberfero.com\/it\/"},{"@type":"ListItem","position":2,"name":"Vulnerability Assessment e Penetration test","item":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/"},{"@type":"ListItem","position":3,"name":"Data Breach Resilience Test","item":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/"},{"@type":"ListItem","position":4,"name":"Data Breach Resilience Test \u2013 Report di esempio"}]},{"@type":"WebSite","@id":"https:\/\/www.cyberfero.com\/it\/#website","url":"https:\/\/www.cyberfero.com\/it\/","name":"Cyberfero","description":"Managed Security Service Provider","publisher":{"@id":"https:\/\/www.cyberfero.com\/it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cyberfero.com\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":["Organization","Place","ProfessionalService"],"@id":"https:\/\/www.cyberfero.com\/it\/#organization","name":"Cyberfero s.r.l.","url":"https:\/\/www.cyberfero.com\/it\/","logo":{"@id":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/#local-main-organization-logo"},"image":{"@id":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/#local-main-organization-logo"},"sameAs":["https:\/\/www.facebook.com\/Cyberfero","https:\/\/x.com\/secureod","https:\/\/www.instagram.com\/cyber_fero\/","https:\/\/www.linkedin.com\/company\/cyberfero","http:\/\/www.pinterest.com\/cyberfero","https:\/\/www.youtube.com\/user\/secureod"],"address":{"@id":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/#local-main-place-address"},"telephone":["+39 0522 1685330"],"openingHoursSpecification":[{"@type":"OpeningHoursSpecification","dayOfWeek":["Monday","Tuesday","Wednesday","Thursday","Friday"],"opens":"09:00","closes":"18:30"},{"@type":"OpeningHoursSpecification","dayOfWeek":["Saturday","Sunday"],"opens":"00:00","closes":"00:00"}],"email":"info@cyberfero.com","faxNumber":"+39 0522 015371","areaServed":"Italia","vatID":"03058120357","taxID":"03058120357","priceRange":"$$$","currenciesAccepted":"\u20ac","paymentAccepted":"paypal, bonifico bancario"},{"@type":"PostalAddress","@id":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/#local-main-place-address","streetAddress":"Via Statuto, 3","addressLocality":"Reggio Emilia","postalCode":"42121","addressRegion":"Italia","addressCountry":"IT"},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.cyberfero.com\/it\/vulnerability-assessment-e-penetration-test\/data-breach-resilience-test\/report-di-esempio\/#local-main-organization-logo","url":"https:\/\/www.cyberfero.com\/wp-content\/uploads\/2024\/05\/Color-logo-no-background.png","contentUrl":"https:\/\/www.cyberfero.com\/wp-content\/uploads\/2024\/05\/Color-logo-no-background.png","width":3163,"height":922,"caption":"Cyberfero s.r.l."}]},"geo.placename":"Reggio Emilia","geo.region":"Italia"},"_links":{"self":[{"href":"https:\/\/www.cyberfero.com\/it\/wp-json\/wp\/v2\/pages\/20793","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cyberfero.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.cyberfero.com\/it\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cyberfero.com\/it\/wp-json\/wp\/v2\/comments?post=20793"}],"version-history":[{"count":0,"href":"https:\/\/www.cyberfero.com\/it\/wp-json\/wp\/v2\/pages\/20793\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.cyberfero.com\/it\/wp-json\/wp\/v2\/pages\/20792"}],"wp:attachment":[{"href":"https:\/\/www.cyberfero.com\/it\/wp-json\/wp\/v2\/media?parent=20793"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}