Module 20: Attack Paths
Track 4 · Advanced features · Time: ~1h · Pass: 8/10
Scenario
The CISO walks in with a board question: "What's our actual blast radius if attacker compromises a developer laptop?" A list of 4,317 findings doesn't answer that. Attack Paths does. You'll explore Prowler's graph-based feature, run real queries, and translate the answers into business language.
Learning objectives
- Explain Attack Paths and the underlying graph (Cartography-derived schema on a graph database such as Neo4j).
- Run built-in and custom (read-only openCypher) Attack Paths queries on AWS scans.
- Use Attack Paths from the UI and from Claude Code (via MCP).
- Translate paths into business-language risk statements.
Register to read the full module
The syllabus and each module overview are public. Create a free account to unlock the full lessons, labs, knowledge checks and the final exam, and to track your progress.