Physical network connection

This entry covers the wired access-port variant of MITRE ATT&CK T1200: an authorized operator physically connects a test device to an accessible Ethernet jack and uses it for local host discovery. A visible jack or working link does not by itself establish network authorization, unrestricted internal access, or command and control; 802.1X/NAC and segmentation can still block or limit the connection. T1200 also covers other hardware additions that are outside these steps.