# Attack Chain

| Field | Value |
|---|---|
| Chain ID | CHAIN-001 |
| Objective | [Objective] |
| Starting Access | [External/Internal/User/etc.] |
| Final Impact | [Impact] |
| Confidence | [Low/Medium/High] |

## Narrative

[Explain how independent findings combine into a realistic business-impact path.]

## Chain Steps

| Step | Finding | Technique | Evidence | Control Gap |
|---:|---|---|---|---|
| 1 | [F-XXX] | [Technique] | [Evidence] | [Gap] |

## MITRE ATT&CK Map

| Step | Tactic | Technique | Detection Opportunity |
|---:|---|---|---|
| 1 | [Tactic] | [Technique] | [Detection] |

## Break Points

List the controls that would break the chain earliest and reduce blast radius.

## Mitigations

- [Mitigation]
