Red Team · 2023
A full-scope attack, and a stronger blue team
Northwind Enterprises
12
New detections
Reached
Objective
Stopped
Follow-up
Overview
A multi-week red team engagement testing people, process, and technology against a realistic advanced-adversary scenario.
The challenge
The client's defences had never been tested end to end. Leadership wanted to know whether their blue team could actually detect and respond to a determined intruder, not just pass a checklist.
Our approach
Over three weeks we combined phishing, physical access, and network exploitation toward a defined objective, working with the blue team afterwards to turn every missed step into a new detection.
The outcome
We reached the target objective, but more valuably the blue team gained a dozen new detections and a purple-team rhythm. A follow-up test six months later was stopped cold on day two.
Keep looking
More engagements
Concerned about something similar?
Every engagement starts with a look at your environment. Let's have that conversation.