Basics

"Everything is stealthy until someone is looking for it." (Lee Chagolla-Christensen, @tifkin_)

• https://redteam.guide/

• https://malcomvetter.medium.com/how-to-create-an-internal-corporate-red-team-1023027ea1e3

• https://sokarepo.github.io/redteam/2024/01/04/increase-your-stealth-capabilities-part1.html

• https://sokarepo.github.io//redteam/2024/01/04/increase-your-stealth-capabilities-part2.html

Tactics

• https://blog.binary-offensive.com/warcon-2022-modern-initial-access-and-evasion-tactics/

• [PDF] WarCon22 - Modern Initial Access and Evasion Tactics (Mariusz Banach)

CISA Red Team

• https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-059a

• https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a

1MB

CISA Red Team Shares Key Findings.pdf

pdf

824KB

Enhancing Cyber Resilience - Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization.pdf

pdf

RTFM

• https://github.com/leostat/rtfm
• [PDF] Red Team Field Manual v3