Provide example models illustrating well-known situations

[scp93ch]

As part of our user documentation #17 efforts and in order to help demonstrate that the network domain model is fit for purpose, we should create and maintain some small example models illustrating well-known cyber/information-security issues. If the issues cannot be demonstrated then we can consider whether we should extend the model to do so or document why the model will not.

Some that spring to mind:

• CrowdStrike update failure
• Ransomware attacks, for example on London hospitals
• Data exfiltration, e.g. by DNS requests or reverse shell
• Log4shell