Attack Tree — Exfiltrate Customer Data

digraph attack {
  rankdir=BT;
  graph [bgcolor=transparent, fontname=Inter];
  node [shape=box, style="rounded,filled", fontname=Inter, fontsize=10];

  Goal [label="Exfiltrate customer PII", fillcolor="#fee2e2"];

  A [label="Direct DB access", fillcolor="#dbeafe"];
  B [label="App-level vuln", fillcolor="#dbeafe"];
  C [label="Insider", fillcolor="#dbeafe"];

  A1 [label="Compromise creds"]; A2 [label="Exploit unpatched RDS CVE"];
  B1 [label="SQLi"]; B2 [label="IDOR endpoint"]; B3 [label="SSRF→metadata"];
  C1 [label="Bribed employee"]; C2 [label="Misuse of legit access"];

  A1 -> A; A2 -> A;
  B1 -> B; B2 -> B; B3 -> B;
  C1 -> C; C2 -> C;
  A -> Goal; B -> Goal; C -> Goal;
}