Objective-driven attack simulation intended to identify complex vulnerabilities not detectable with automated scanning. This supports audit and compliance requirements as necessary.