So that's one of the things that we are doing up and testing.
You actually have to keep in mind that some of these devices that you may actually be able to enumerate
whenever you do reconnaissance on the network or either you are scanning and that perhaps are actually
vulnerable to something, they may actually be managed by an MDM.
So try to actually find ways that you can bypass or even block the communication between the MBM and
the mobile device.
Right.
So, of course, that's easier said than done.
But there may be ways that you can analyze the communication of that device is actually allowed to do
or not to do.
Right.
So you can actually do this by actually monitoring the device activity or perhaps you say, OK, you
know, this device perhaps is actually communicating that I am seeing these type of transactions to
some AIPA in the Internet and this medium is actually allowing that to happen.
So now you actually have a footprint and if an attack surface that you can actually further explore.
So, for example, if that perhaps is actually doing with crypto, you probably can take advantage of
a vulnerability to hijack that transaction, for example, or an EPA abuse vulnerability that may actually
be irrelevant in that case.
But always keep in mind that a lot of organizations now are actually using MDM to actually manage those
devices, monitor them and also patch them.
Right.
So it's getting a little harder to actually do some of the bypasses nowadays, but definitely it is
possible now, actually, not only looked at the infrastructure here, but what the devices are actually
communicating outside of the company as well.