Exploitation, Post-Exploitation, and Red Team Operations Questions
The hands-on offensive tradecraft of compromising, pivoting through, and persisting in systems while evading defenses. Covers exploit development, privilege escalation, Active Directory and Windows exploitation, lateral movement, persistence, command-and-control, and attack chaining, extending into adversary-emulation campaigns: red-team engagement planning and objectives, multi-stage attack planning, operational security for offensive operators, and detection and defense evasion including web application firewall detection and bypass. The advanced offensive-operations layer executed against real targets, where staying undetected is itself an objective, distinct from the methodical scoped-assessment workflow of a penetration test.
Outline how you would use MITRE ATT&CK to design a red team exercise targeted at testing detection capability for credential theft and lateral movement. Include objectives, selected techniques (with IDs), scope/constraints, allowed actions, and success metrics/stop conditions.
That is every published Exploitation, Post-Exploitation, and Red Team Operations question for Information Security Analyst so far. Browse the other topics in this category, or practice this one interactively.