Assumed Breach Assessment

We work collaboratively to define specific objectives for the assessment. These objectives might involve testing your response to particular attack vectors or evaluating your team’s effectiveness in containing a specific type of breach scenario. We also establish the scope of the assessment, clearly outlining the areas of your network or systems that will be included in the simulated attack. 

In collaboration with you, we establish a pre-established foothold within a designated area of your network. This simulates a scenario where an attacker has already bypassed your perimeter defences. This access typically has minimal access or privilege and is intended to be as realistic as possible. 

The red team acts as the adversary, employing various attacker tactics, techniques, and procedures (TTPs) to achieve specific objectives without being detected. The focus is on expanding their presence within the target environment. They move laterally through the network, attempting to gain access to sensitive data or critical systems. This phase helps assess the organisation’s ability to detect and respond to intrusions and to determine the extent of the damage an attacker could cause if undetected. 

After the assessment, the red team prepares a detailed report documenting their findings, methodologies, and recommendations. The report highlights the vulnerabilities discovered, the techniques used, and potential impacts. It also includes actionable recommendations to help the organisation improve its security defences. A debriefing session is conducted with the organisation’s stakeholders to discuss the findings and ensure a clear understanding of the assessment’s outcomes.