What the attacker wants
Orient here when you know the incident class but not the ENI6MA page name. The map is three public columns — Channel & cryptanalysis, Credentials & humans, Replay, relay & forgery — plus a patterns lens for buyer context. It is deliberately not a stage matrix and not a residual-risk essay.
