Tagred teaming

The Essence of a Superior Red Teamer

T

We’re sometimes asked “What makes a good red teamer?” While the range of attributes is actually quite broad, it’s possible to distill these attributes to a finite or representative set. The following infographic captures what we believe to be at least a few of the superior red teamer’s most salient attributes. Enjoy! And for accessibility purposes, here’s the...

Red Teaming: Degrees of Influence and Control

R

When red teaming, it’s often useful to model and distinguish elements of the engagement based on the degree of influence or control each actor exercises over these elements. For example, as the red team (RED), I unilaterally control some aspects of the engagement domain. I choose my goals, and I choose how to invest my time and resources. I also choose various aspects of my operational code. I...

Lost Keys and Sober Red Teams

L

Like the proverbial drunk looking for his lost keys under the lamppost, many red teamers focus on what they know best. But if what they know best differs from what the adversaries know best? That’s a gap, and gaps can be problematic if not addressed, as we’ve discussed before.       We can recall, for example, more than one red teaming project in which the red team...

Behemoth and Leviathan

B

As nice as it would be to fit the systems we red team into a convenient box, it will never happen, and we have the Behemoth and the Leviathan to thank for that.       This past weekend, I read Harold Kushner’s The Book of Job: When Bad Things Happened to a Good Person. In the book, Kushner describes the Behemoth and the Leviathan in terms that are relevant to red...

Red Teaming: Behind the Bluster

R

Red teaming sounds cool, right? So why isn’t everyone doing it? A lot of reasons exist, one of which is the simple fact that people often don’t want to learn what they don’t know. This very human behavior is the basis of RTJ Red Teaming “Law” No. 1 (“The Jaunty Man”). Yes, valid reasons not to red team exist, but to get at those, you first need to...

Categories

Terms of Use

Please read.