Red teaming
Also called: red team · red team exercise
An authorized team plays a real adversary and, within agreed limits, combines social engineering, exploitation and lateral movement to reach a set goal, such as domain admin rights, while testing whether defenders notice and respond in time. Compared with a penetration test it focuses more on detection and response, and suits organizations that already have basic defenses and monitoring.
Further reading: csrc.nist.gov
From the Security Academy
Vulnerability Scanning, Penetration Testing and Red Teaming: How They Differ, How Often, and Which to Buy
Scans find known flaws, pentests test whether you can be breached, red teams test detection and response. Blind spots, required frequencies, scoping, reports.
15 min read ·
Advisories that mention this term
No advisories mention this term yet.