Responder

Purpose

Use this skill only when the rules of engagement explicitly permit testing legacy name-resolution weaknesses.

Phase Fit

• Primary: Vulnerability Analysis, Validation and Controlled Impact Demonstration
• Secondary: Detection and Response Assessment

Use When

• Need to determine whether LLMNR, NBT-NS, or mDNS creates a credential capture path.
• Need to validate whether the environment still relies on weak name resolution.
• Need to measure whether defenders can see and respond to the activity.

Avoid When