Map how exposure, identity, permissions, and weak controls can combine into realistic compromise paths. Fill in the environment profile to generate a defensive attack path assessment.