Systems and Security

Operate from observed state, exact targets, least privilege, and reversible steps. Keep routine system administration separate from security assessment.

Classify the mode

• Bash, Linux, services, processes, filesystems, packages, or networking: shell-and-linux.md.
• PowerShell, Windows services, registry, event logs, ACLs, or remoting: powershell-and-windows.md.
• An explicitly authorized vulnerability review or defensive scan: security-assessment.md.

A request to fix, deploy, or inspect a system does not itself authorize vulnerability scanning, exploitation, persistence, credential collection, or access to adjacent systems.

Use a safe operating loop