A true picture of how far an adversary could get, and how fast
Red Team Operations
Test the whole organisation: people, process and technology.
- Operations
- OP-204
NightfallRed team
Seen by your SOC
- ReconMissedNo alert
- AccessMissedNo alert
- EscalateDetectedAlerted 02:47
- ObjectivePendingIn progress
- Operations
- OP-204
NightfallRed team
Objectives
2 of 4 reached- Open the VPN administration console as a standard userReached
- Read tenant data through the legacy API with an expired tokenIn progress
Seen by your SOC
- ReconMissedNo alert
- AccessMissedNo alert
- EscalateDetectedAlerted 02:47
- ObjectivePendingIn progress
Overview
A red team operation is the closest thing to a real attack you can commission. We set objectives that matter to your business, then pursue them across people, process and technology the way a capable adversary would: quietly, over weeks, with your defenders unaware until the debrief. Every step is tracked in the platform.
What we do
- 01
Objective-based operations against agreed crown jewels
- 02
Assumed-breach and insider scenarios
- 03
Social engineering and, where in scope, physical intrusion
- 04
Measurement of detection and response at every step
- 05
Purple-team debriefs that turn the operation into training
How an engagement runs
- Operations
- OP-204
- Plan
- 01Scoping and rules of engagementRules of engagement · 3 domains, 2 rangesDone6 Oct
- 02ReconnaissanceSurface · 1,284 assets mappedDone7 to 21 Oct
- 03Initial accessPR-0917 · path reproducedDone24 Oct
- 04Pursuit of objectivesObjectives · 2 of 4 reachedRunningTonight
- 05Debrief and remediationDebrief · November board pageNext3 Nov
What you get
01 02 Evidence of what your defences detected, when, and what they missed
03 A prioritised remediation plan, retested in the platform to prove the fix