{"id":11995,"date":"2024-05-20T14:01:19","date_gmt":"2024-05-20T13:01:19","guid":{"rendered":"https:\/\/www.b2econsulting.com\/?p=11995"},"modified":"2024-05-22T08:34:27","modified_gmt":"2024-05-22T07:34:27","slug":"cybersecurity-penetration-testing","status":"publish","type":"post","link":"https:\/\/www.b2econsulting.com\/cybersecurity-penetration-testing\/","title":{"rendered":"Cybersecurity: Penetration Testing"},"content":{"rendered":"<div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"background-color: rgba(255,255,255,0);background-position: center center;background-repeat: no-repeat;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;margin-bottom: 0px;margin-top: 0px;border-width: 0px 0px 0px 0px;border-color:#eae9e9;border-style:solid;\" ><div class=\"fusion-builder-row fusion-row\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_1_3 1_3 fusion-one-third fusion-column-first\" style=\"width:33.333333333333%;width:calc(33.333333333333% - ( ( 4% ) * 0.33333333333333 ) );margin-right: 4%;margin-top:0px;margin-bottom:20px;\"><div class=\"fusion-column-wrapper fusion-flex-column-wrapper-legacy\" style=\"background-position:left top;background-repeat:no-repeat;-webkit-background-size:cover;-moz-background-size:cover;-o-background-size:cover;background-size:cover;background-color:#ffffff;padding: 40px 40px 0px 40px;\"><div class=\"fusion-widget-area fusion-widget-area-1 fusion-content-widget-area\"><style type=\"text\/css\">.fusion-widget-area-1 {padding:0px 0px 0px 0px;}.fusion-widget-area-1 .widget h4 {color:#3b4251;}.fusion-widget-area-1 .widget .heading h4 {color:#3b4251;}.fusion-widget-area-1 .widget h4 {font-size:14px;}.fusion-widget-area-1 .widget .heading h4 {font-size:14px;}<\/style><section id=\"pyre_tabs-widget-2\" class=\"fusion-slidingbar-widget-column widget fusion-tabs-widget\">\t\t<div class=\"fusion-tabs-widget-wrapper fusion-tabs-widget-1 fusion-tabs-classic fusion-tabs-image-default tab-holder\">\n\t\t\t<nav class=\"fusion-tabs-nav\">\n\t\t\t\t<ul class=\"tabset tabs\">\n\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t<li class=\"active\"><a href=\"#\" data-link=\"fusion-tab-recent\">Recent<\/a><\/li>\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t<\/ul>\n\t\t\t<\/nav>\n\n\t\t\t<div class=\"fusion-tabs-widget-content tab-box tabs-container\">\n\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t<div class=\"fusion-tab-recent fusion-tab-content tab tab_content\" data-name=\"fusion-tab-recent\">\n\n\t\t\t\t\t\t\n\t\t\t\t\t\t<ul class=\"fusion-tabs-widget-items news-list\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"image\">\n\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.b2econsulting.com\/agile-expertise-transformative-results\/\" aria-label=\"Agile Expertise, Transformative Results: A Conversation\"><img decoding=\"async\" width=\"66\" height=\"66\" src=\"https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/shutterstock_1981823216-Agile-Tx-scaled-e1742314285348-66x66.jpg\" class=\"attachment-recent-works-thumbnail size-recent-works-thumbnail wp-post-image\" alt=\"Agile Expertise, Transformative Results\" srcset=\"https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/shutterstock_1981823216-Agile-Tx-scaled-e1742314285348-66x66.jpg 66w, https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/shutterstock_1981823216-Agile-Tx-scaled-e1742314285348-150x150.jpg 150w\" sizes=\"(max-width: 66px) 100vw, 66px\" \/><\/a>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"post-holder\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.b2econsulting.com\/agile-expertise-transformative-results\/\">Agile Expertise, Transformative Results: A Conversation<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"fusion-meta\">\n\t\t\t\t\t\t\t\t\t\t\t\tMarch, 2025\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"image\">\n\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.b2econsulting.com\/diverse-perspectives-fuel-innovation\/\" aria-label=\"B2E Consulting: Diverse Perspectives Fuel Innovation\"><img decoding=\"async\" width=\"66\" height=\"66\" src=\"https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/Video-Title-Still-66x66.jpg\" class=\"attachment-recent-works-thumbnail size-recent-works-thumbnail wp-post-image\" alt=\"Diverse Perspectives Fuel Innovation\" srcset=\"https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/Video-Title-Still-66x66.jpg 66w, https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/Video-Title-Still-150x150.jpg 150w\" sizes=\"(max-width: 66px) 100vw, 66px\" \/><\/a>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"post-holder\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.b2econsulting.com\/diverse-perspectives-fuel-innovation\/\">B2E Consulting: Diverse Perspectives Fuel Innovation<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"fusion-meta\">\n\t\t\t\t\t\t\t\t\t\t\t\tMarch, 2025\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"image\">\n\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.b2econsulting.com\/viewpoints-hr-transformation\/\" aria-label=\"B2E Consulting Viewpoints: Can HR Transformation be Successful?\"><img decoding=\"async\" width=\"66\" height=\"33\" src=\"https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/shutterstock_2145156891-scaled.jpg\" class=\"attachment-recent-works-thumbnail size-recent-works-thumbnail wp-post-image\" alt=\"HR Transformation\" srcset=\"https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/shutterstock_2145156891-300x150.jpg 300w, https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/shutterstock_2145156891-768x384.jpg 768w, https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/shutterstock_2145156891-1024x512.jpg 1024w, https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2025\/03\/shutterstock_2145156891-scaled.jpg 2560w\" sizes=\"(max-width: 66px) 100vw, 66px\" \/><\/a>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"post-holder\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.b2econsulting.com\/viewpoints-hr-transformation\/\">B2E Consulting Viewpoints: Can HR Transformation be Successful?<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"fusion-meta\">\n\t\t\t\t\t\t\t\t\t\t\t\tMarch, 2025\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t<div style=\"clear:both;\"><\/div><\/section><div class=\"fusion-additional-widget-content\"><\/div><\/div><div class=\"fusion-widget-area fusion-widget-area-2 fusion-content-widget-area\"><style type=\"text\/css\">.fusion-widget-area-2 {padding:0px 0px 0px 0px;}.fusion-widget-area-2 .widget h4 {color:#3b4251;}.fusion-widget-area-2 .widget .heading h4 {color:#3b4251;}.fusion-widget-area-2 .widget h4 {font-size:14px;}.fusion-widget-area-2 .widget .heading h4 {font-size:14px;}<\/style><style type=\"text\/css\" data-id=\"tweets-widget-3\">@media (max-width: 800px){#tweets-widget-3{text-align:center !important;}}<\/style><section id=\"tweets-widget-3\" class=\"fusion-widget-mobile-align-center fusion-widget-align-center fusion-footer-widget-column widget tweets\" style=\"text-align: center;\"><h4 class=\"widget-title\">Recent Tweets<\/h4><style type=\"text\/css\">.fusion-content-widget-area #tweets-widget-3 .jtwt .jtwt_tweet:before, .fusion-footer-widget-area #tweets-widget-3 .jtwt .jtwt_tweet:before {color: #3c455a;}<\/style>\t\t\t<div class=\"twitter-box\">\n\t\t\t\t<div class=\"twitter-holder\">\n\t\t\t\t\t<div class=\"b\">\n\t\t\t\t\t\t<div class=\"tweets-container\" id=\"tweets_tweets-widget-3\">\n\t\t\t\t\t\t\t<ul class=\"jtwt\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li class=\"jtwt_tweet\">\n\t\t\t\t\t\t\t\t\t\t<p class=\"jtwt_tweet_text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<span class=\"arrow\"><\/span>\n\t\t\t<\/div>\n\t\t\t<div style=\"clear:both;\"><\/div><\/section><div class=\"fusion-additional-widget-content\"><\/div><\/div><div class=\"fusion-clearfix\"><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-1 fusion_builder_column_2_3 2_3 fusion-two-third fusion-column-last\" style=\"width:66.666666666667%;width:calc(66.666666666667% - ( ( 4% ) * 0.66666666666667 ) );margin-top:0px;margin-bottom:20px;\"><div class=\"fusion-column-wrapper fusion-flex-column-wrapper-legacy\" style=\"background-position:left top;background-repeat:no-repeat;-webkit-background-size:cover;-moz-background-size:cover;-o-background-size:cover;background-size:cover;padding: 0px 0px 0px 0px;\"><span class=\" fusion-imageframe imageframe-none imageframe-1 hover-type-none\"><img decoding=\"async\" width=\"2560\" height=\"1280\" alt=\"Cyber security: penetration testing\" title=\"Login,And,Password,,Cyber,Security,Concept,,Data,Protection,And,Secured\" src=\"https:\/\/www.b2econsulting.com\/wp-content\/uploads\/2024\/05\/shutterstock_1794130912-scaled-e1716146079514.jpg\" class=\"img-responsive wp-image-11997\"\/><\/span><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-separator fusion-full-width-sep\" style=\"margin-left: auto;margin-right: auto;margin-top:20px;width:100%;\"><\/div><div class=\"fusion-sep-clear\"><\/div><style type=\"text\/css\"><\/style><div class=\"fusion-title title fusion-title-1 fusion-sep-none fusion-title-text fusion-title-size-one\" style=\"margin-top:0px;margin-bottom:0px;\"><h1 class=\"title-heading-left\" style=\"margin:0;\"><h1 style=\"text-align: left;\">Cybersecurity: Penetration Testing<\/h1>\n<h4 style=\"color: #f39200;\">Dr. John McCarthy | B2E Principal<\/h4><\/h1><\/div><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-separator fusion-full-width-sep\" style=\"margin-left: auto;margin-right: auto;margin-top:10px;width:100%;\"><\/div><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-text fusion-text-1\" style=\"transform:translate3d(0,0,0);\"><h3><span style=\"color: #f39200;\">Background<\/span><\/h3>\n<p>There are many stories in the news these days regarding companies that were breached, customer data exposed, fines levied &#8211; it\u2019s becoming a commonplace occurrence.<\/p>\n<p>Both large and small companies can be a target for cyber criminals. In fact, some types of cyber-crime such as Ransomware have become such a lucrative market that they are now offered on the darkweb as RaaS (Ransomware as a Service), complete with its own support staff and payment systems. The nature of these attacks has evolved significantly over recent years; as the Anti-Virus and Endpoint Detection and Response capabilities have improved, malware (as used historically) is becoming harder to deploy at scale. Threat actors are instead moving to a model where infection and encryption of data is not the only method to extort companies. Instead, while still trying to encrypt company data, they also steal it so that they can blackmail companies into paying them and prevent them from releasing the data publicly.<\/p>\n<p>This change of tactic significantly changes the landscape for every company. Now, it only takes one mistake by one user and everything that an employee has access to can be used in an extortion campaign. Since every organisation will hold confidential data that it doesn\u2019t want in the public domain &#8211; employee details, customer details, research &#8211; every company is a valid target.<\/p>\n<p>The Verizon Data Breach Investigations Report (DBIR) is released every year and offers an invaluable insight into the current threat landscape and emerging trends. The 2024 release details the 180% increase for exploitation of vulnerabilities being the initial point of compromise, which is almost triple on the previous year <a href=\"#_ftn1\" name=\"_ftnref1\">[1]<\/a>. The origin of these vulnerabilities being exploited was, perhaps unsurprisingly, typically via web applications. Many of these vulnerabilities can be exploited automatically as soon as they are discovered by a threat actor or their tooling.<\/p>\n<p>Penetration testing can help identify weaknesses in security practices and vulnerabilities before the threat actors do, allowing time to fix them before they are exploited. While a penetration test will not find every possible past, current and future vulnerability affecting an organisation, it will help harden an organisation to attack. This will make a successful attack a lot less likely, a lot harder to achieve and require a lot more time and effort on the attacker\u2019s end, allowing businesses more time to detect and respond to the incident.<\/p>\n<h3><span style=\"color: #f39200;\">Who\u2019s It For<\/span><\/h3>\n<p>Any organisation can benefit from a penetration test; if holding or processing sensitive data, it\u2019s potentially a target to a threat actor. However, there is the cost to be considered &#8211; penetration tests are not inexpensive, and reducing the cost by arbitrarily reducing the day count for the engagement is typically not an advisable approach, as it could result in parts of the scope being skipped, which can leave important but unchecked areas of the estate vulnerable. It is therefore recommended to set budget aside each year for cyber security, of which penetration testing should be a component, and that scoping is performed in collaboration with a penetration testing partner. This will help to ensure the organisation gets the best value possible from the engagement.<\/p>\n<h3><span style=\"color: #f39200;\">Preparation<\/span><\/h3>\n<p>Once scoping has been agreed, there will be some steps that the business needs to take. The penetration testing partner should provide guidance on how to go about preparation, but there are some general actions that should be considered:<\/p>\n<ul>\n<li><em><strong>Access<\/strong> <\/em>\u2013 the scope of the work will dictate how access will be performed but if the scope is not publicly accessible, some form of remote access may need to be put in place, or onsite work agreed with the partner. As many organisations had to put in place technologies to allow for remote working during COVID, this is often relatively straightforward to achieve, and current VPN \/ Citrix solutions used by employees will often provide an easily solution.<\/li>\n<li><em><strong>Accounts<\/strong><\/em> \u2013 penetration testers will benefit from having accounts created for them for whichever domain or application is in scope. Ultimately, they will be trying to locate credentials separately, but having a valid set of credentials will allow them good visibility and help them to provide as much value as possible in the event they are unable to locate any themselves.<\/li>\n<li><em><strong>Planning for Disruption<\/strong><\/em> \u2013 disrupting business activities will never be purposefully performed. Good consultants understand how important it is not to impair business operations. However, it is always possible for things to go wrong during a penetration test, despite best efforts. For this reason, having redundancy plans and identifying key systems to handle with caution is a very important pre-engagement activity for any organisation.<\/li>\n<li><em><strong>Notifying SOC and Third Parties<\/strong><\/em> \u2013 penetration tests by their nature can cause a lot of \u2018alarm bells\u2019 to be triggered in defensive technologies. If the organisation has a SOC, it is a good idea to notify them that a penetration test is taking place to avoid unnecessary panic and diversion of attention. Equally, all third parties (unless they have explicit exceptions e.g. AWS) who may fall into the scope of the work must be informed and provide written agreement for the penetration taking place to avoid legal implications from the Computer Misuse Act.<\/li>\n<\/ul>\n<h3><span style=\"color: #f39200;\">What\u2019s Involved<\/span><\/h3>\n<p>The nature of the work will depend heavily on the scope agreed and the type of testing being performed. However, at a high level, scans will be run to gather a baseline of hosts on the network, services running on those hosts and known vulnerabilities affecting the discovered services. After the baseline scans have taken place, the approach switches to a manual one, where the consultant will be looking at each host and service individually to identify misconfigurations and vulnerabilities that may be present. For web applications this goes into a much deeper review on an application layer for the web services, looking for common and extremely dangerous vulnerabilities in both off-the-shelf and custom-built web applications, no matter what the technology stack is.<\/p>\n<p>Should the internal network be in scope, this would also include a review of the Active Directory (AD). Attempts to use weaknesses in account, group and AD permissions to move laterally onto other machines and escalate privilege can also feature as part of the testing activity.<\/p>\n<h3><span style=\"color: #f39200;\">Reflection<\/span><\/h3>\n<p>Once the penetration test has completed and the report has been presented, this is the natural time for the company Head of Cyber Security to assess the holistic picture. This includes reviewing all aspects of the penetration test and identifying trends and urgent actions as a result of the outcome.<\/p>\n<p>The urgent actions are generally a lot easier to identify than trends, and the penetration testing partner can suggest the best way to prioritise issues. Typically, this will be given by a rating system in the report, but it\u2019s best practice to review and discuss the next steps. A typical approach is to work from the highest severity down when considering priority for remediation, but access should also be considered \u2013 if a vulnerability is internet facing and high severity it may be more pressing than an internal critical vulnerability, just due to the restricted access. A strong technical understanding is key in appreciating the nature of a vulnerability, and the penetration testing partner should be able to help an organisation process the findings and their urgency.<\/p>\n<p>Less urgent but important vulnerabilities can also be established from the report. For example, one missing patch may not constitute a problematic trend. However, if there are several End-of-Life systems discovered and multiple patches missing across many hosts in the estate, this could indicate that the organisation\u2019s patch policy may need attention. These can sometimes be hard to identify but reviewing with the consultant who performed the test can provide expert insight on general advice for improving practices moving forwards.<\/p>\n<p>In conclusion, penetration testing is relevant for all business types and sizes, and it will deliver significantly more value than an automated scan could alone. It should identify vulnerabilities, as well as weaknesses in practices and gaps in policies to help the organisation remain resilient long after the engagement has ended and the urgent fixes applied. Discover how we can help support your organisation&#8217;s cybersecurity endeavours <a href=\"https:\/\/www.b2econsulting.com\/cyber-security\/\">here<\/a>.<\/p>\n<p><em><strong>Sources:<\/strong><\/em><\/p>\n<p><a href=\"#_ftnref1\" name=\"_ftn1\">[1]<\/a> https:\/\/www.verizon.com\/business\/en-gb\/resources\/reports\/dbir\/2024\/summary-of-findings\/<\/p>\n<\/div><div class=\"fusion-clearfix\"><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-2 fusion_builder_column_1_3 1_3 fusion-one-third fusion-column-first\" style=\"width:33.333333333333%;width:calc(33.333333333333% - ( ( 4% ) * 0.33333333333333 ) );margin-right: 4%;margin-top:0px;margin-bottom:20px;\"><div class=\"fusion-column-wrapper fusion-flex-column-wrapper-legacy\" style=\"background-position:left top;background-repeat:no-repeat;-webkit-background-size:cover;-moz-background-size:cover;-o-background-size:cover;background-size:cover;padding: 0px 0px 0px 0px;\"><div class=\"fusion-clearfix\"><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-3 fusion_builder_column_2_3 2_3 fusion-two-third fusion-column-last\" style=\"width:66.666666666667%;width:calc(66.666666666667% - ( ( 4% ) * 0.66666666666667 ) );margin-top:0px;margin-bottom:20px;\"><div class=\"fusion-column-wrapper fusion-flex-column-wrapper-legacy\" style=\"background-position:left top;background-repeat:no-repeat;-webkit-background-size:cover;-moz-background-size:cover;-o-background-size:cover;background-size:cover;padding: 0px 0px 0px 0px;\"><div class=\"fusion-clearfix\"><\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":10,"featured_media":11997,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[104,110,72],"tags":[],"class_list":["post-11995","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apply-for-jobs","category-articles","category-consulting"],"_links":{"self":[{"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/posts\/11995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/comments?post=11995"}],"version-history":[{"count":4,"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/posts\/11995\/revisions"}],"predecessor-version":[{"id":12029,"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/posts\/11995\/revisions\/12029"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/media\/11997"}],"wp:attachment":[{"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/media?parent=11995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/categories?post=11995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.b2econsulting.com\/wp-json\/wp\/v2\/tags?post=11995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}