A focused red team assessment identified exploitable trust relationships, over-permissive identity paths, and logging gaps that mattered most to the business.