Red Team Tactics

무엇을 하나요

Red Team Tactics Adversary simulation principles based on MITRE ATT&CK framework. 1. MITRE ATT&CK Phases Attack Lifecycle Phase Objectives | Phase | Objective | | | | | Recon | Map attack surface | | Initial Access | Get first foothold | | Execution | Run code on target | | Persistence | Survive reboots | | Privilege Escalation | Get admin/root | | Defense Evasion | Avoid detection | | Credential Access | Harvest credentials | | Discovery | Map internal network | | Lateral Movement | Spread to other systems | | Collection | Gather target data | | C2 | Maintain command channel | | Exfiltration | Extract data | 2. Reconnaissance Principles Passive vs Active | Type | Trade off | | | | | Passive…