description
11/21/2022

💯 Red Teaming

What is Red Teaming?

Red Teaming is the process of using tactics, techniques, and procedures (TTPs) to emulate a real-world threat
The goal is to measure the effectiveness of the people, processes, and technologies that come together to defend an environment

"Red teams are meant to provide an adversarial perspective by challenging initial assumptions that are made by organizations and defenders."

Operations Security (OPSEC)

A term originating from the United States military and adopted by the information security community
Generally speaking, it's how easily actions can be observed by hostile intelligence

Primum non nocere?

This is a Latin phrase that translates to "first, do no harm" in English
As Security professionals, we don't want to harm or weaken the security of our clients right?
We are here to improve their security

Attack Lifecycle: Lockheed Martin's "Cyber Kill Chain"

This is a framework that describes each phase an attacker must go through to compromise a target

Reconnaissance
Weaponize
Delivery
Exploitation
Installation
Command & Control (C2)
Actions & Objectives