AuthorRed Team Journal

10 Things You Can Do Right Now to Start Red Teaming (Updated with Infographic)

1

Real-world security teams often lack the time to engage in deep red teaming. We get it, so here’s a set of quick, back-of-the-envelope red teaming drills you can run while running from one crisis to the next. Draw a simple systems diagram: primary functions, inputs, outputs, key interfaces. Does your security team consider and address all of them? If not, why not? List three harmful things you...

Red Teaming: Closing the Gaps

R

Despite the fact that we pride ourselves on thinking laterally and creatively, we red teamers are still human, and as humans, we share a host of “wetware” issues with our non-red teaming colleagues. The difference? We’re aware of the issues (or at least we should be), and we (usually) try to do something about them. Even so, the issues persist...

The Essence of a Superior Red Teamer

T

We’re sometimes asked “What makes a good red teamer?” While the range of attributes is actually quite broad, it’s possible to distill these attributes to a finite or representative set. The following infographic captures what we believe to be at least a few of the superior red teamer’s most salient attributes. Enjoy! And for accessibility purposes, here’s the...

Red Teaming: Degrees of Influence and Control

R

When red teaming, it’s often useful to model and distinguish elements of the engagement based on the degree of influence or control each actor exercises over these elements. For example, as the red team (RED), I unilaterally control some aspects of the engagement domain. I choose my goals, and I choose how to invest my time and resources. I also choose various aspects of my operational code. I...

Lost Keys and Sober Red Teams

L

Like the proverbial drunk looking for his lost keys under the lamppost, many red teamers focus on what they know best. But if what they know best differs from what the adversaries know best? That’s a gap, and gaps can be problematic if not addressed, as we’ve discussed before.       We can recall, for example, more than one red teaming project in which the red team...

Categories

Terms of Use

Please read.