Post #4379294
2026-08-04 15:52 UTC
@winterknight1337@infosec.exchange @neurovagrant@masto.deoan.org
Did they have prior knowledge of your engagement? When I used to live in compliance land, whenever we hired red teams we usually gave the contractor a reserved ip range and told the SoC to not sound the alarms or kill traffic without saying why (they knew?). Then afterwards we compared notes about what the red team did vs what we detected
Replies (1)
-
@winterknight1337@infosec.exchange 2026-08-04 15:54
@kajer@infosec.exchange @neurovagrant@masto.deoan.org For this one yeah. We’ve done red teams against them too tho. A very difficult client to test against. This was to determine detection gaps and prevention gaps and they did well.