← Back to Attack / Defense Lab
OSI LAYER 1 // Physical Layer

Device Theft

Device theft removes a computer, network device, storage medium, or mobile endpoint from authorized custody.

01 // HOW IT WORKS

Mechanism

The primary risk is loss of availability and confidentiality; data stored locally may also be exposed if encryption is weak.

02 // DETECTION

Indicators to watch

Missing asset records, unexpected device check-in failures, last-seen telemetry without physical confirmation, and loss of network presence.

03 // ATTACK FLOW

Concept diagram

01Managed device↓
02Physical removal↓
03Endpoint disappears↓
04Data / credential exposure↓
05Encryption + asset controls
04 // PREVENTION

Defensive controls

Use full-disk encryption, asset tracking, secure storage, remote management, device lockout, and rapid credential/session revocation.

05 // SECURITY TOOL

Recommended security control

MDM/EDR asset inventory

Use decommissioned or training hardware.

06 // DEFENCE PRACTICE LAB

Defence practice lab

The administrator has not attached a tool link yet. This slot will show “Build Soon” until an external link is configured.

Build Soon
◈
DEFENCE PRACTICE LAB // BUILD SOONThe administrator can add or edit an external defence practice lab link from the private admin portal.
07 // DEFENCE TECHNIQUES

Defence techniques

Defence techniques for this attack will be added by the administrator.

AUTHORIZED LEARNING

All attack descriptions are for defensive education. Test scanning, traffic generation, interception, wireless testing, and vulnerable applications only on systems and networks you own or are explicitly authorized to assess.