Skill UI

This comprehensive guide outlines how to plan and execute a full-scope red team engagement. It simulates real-world Advanced Persistent Threat (APT) behavior, covering the entire cyber kill chain from initial reconnaissance (OSINT) through lateral movement, credential harvesting, and data exfiltration. It utilizes MITRE ATT&CK frameworks to rigorously test an organization's detection, prevention, and incident response capabilities.

This skill guides the essential pre-testing phase for red team engagements. It defines the scope, objectives, Rules of Engagement (ROE), and threat models using established frameworks like MITRE ATT&CK. By developing a comprehensive plan, users ensure that offensive security testing is performed safely, legally, and within defined operational boundaries, thereby preventing unintended business disruption.

This guide details comprehensive physical security penetration testing techniques, essential for red teaming engagements. It covers methods such as tailgating, badge cloning (RFID), lock bypassing, and deploying rogue network devices (e.g., Pineapple, LAN Turtle). It provides practical toolkits and MITRE ATT&CK mapping to evaluate an organization's physical and digital control weaknesses.

Structured red team engagement planning that blends MITRE ATT&CK kill-chain ordering, technique scoring, choke point and OPSEC analysis, and crown-jewel targeting into authorized offensive simulations with tooling like the engagement planner.

A comprehensive methodology for planning, running, and measuring strategic adversary engagement operations using the MITRE Engage framework. It guides teams beyond ad hoc deception by defining measurable Goals (Expose, Affect, Elicit), Operational Objectives, and mapping activities to specific MITRE ATT&CK techniques. Essential for building formal denial and deception programs.