nmap-portable-7.95.exe -sn 10.0.2.0/24

She plugged a tiny, nondescript USB drive into the server’s last functional USB port. On it was a single file: nmap-portable-7.95.exe .

Lena smiled. "Nmap doesn't care about your operating system. It cares about packets. And packets don't need permission."

She unplugged the server from the wall, physically isolating the subnet. The breach was contained. With a final command, she generated a report directly to the USB drive:

No installer. No registry keys. No admin privileges required. Just a statically compiled, dependency-free binary that fit in the same space as a medium-sized JPEG.

The result came back: "custom protocol: cobalt-strike beacon (aggressive)"