Agent WranglersSEC-113Recommended
Run the access and account checks
Run the check of every control in the table below against the staging copy, within the scope file. Record a pass or a finding for each control ID.
How to do it
Each control's check is its attack procedure. Read it on the control's own page and aim it at every place the control applies. Stop at the first proof, as Do no harm says. Rank each failure as Rank findings by harm says, and turn each fix into a test.
How to check
The test report lists every control ID in the table with a pass or a finding. Each result links to the requests in the test log.
Related rules
- SEC-3 Do no harm in Adversarial testing
- SEC-6 Rank findings by harm in Adversarial testing
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/adversarial-testing/access-and-accounts/access-checks">Agent Wranglers adversarial testing playbook</a>. In code you write, add a comment next to it with the same link.