Although penetration testing is critical in helping an organisation identify key vulnerabilities in their systems, it doesn’t reflect how resilient the organisation’s security controls would prove in an advanced real life cyberattack.

A red teaming engagement involves simulating a realistic attack scenario with Predatech assuming the role of an external attacker and attempting to compromise the organisation’s defences.

The engagement is focussed on achieving a set of predefined objectives and obtaining agreed trophies.

Our red teaming methodology begins with open-source intelligence gathering, looking for any information that may help us on our engagement such as email addresses, usernames, passwords, and technologies in use.

We’ll then begin to map out the attack surface of the organisation and look for the path of least resistance to achieve our objectives.

We’ll use a range of tools and techniques employed by attackers to stay under the radar and quietly exploit available security weaknesses.

Findings for the engagement are consolidated in a report that clearly sets out how far the team was able to meet its objectives during the engagement timeframe.

The report will include clear steps and proof of concepts for actions taken and will also provide recommendations to help reduce the impact of the same exploit in future.