WHAT IS RED TEAMING ?

Penetration tests and security assessments are essential to understand your organization’s exposure to cybersecurity risks. However, they do not always prepare your employees, executives and Incident Responders against real threats. A red team is a group that plays the role of an enemy or competitor and provides security feedback from that perspective. Red teams are used in many fields, especially in cybersecurity, airport security, the military, and intelligence agencies.

A red team is a group that plays the role of an enemy or competitor and provides security feedback from that perspective. Red teams are used in many fields, especially in cybersecurity, airport security, the military, and intelligence agencies. Red Team Operations aim to improve your asset’s and personnel’s readiness through a realistic security incident drill that can target your organization’s cyber, physical, and human information security elements.

Our Red Team Service

Test the effectiveness of your own security controls before malicious parties do it for you.

Experience a Real-World Attack, Without Real World Consequences

With Red Teaming, we will pull no punches, giving you an attack simulation that feels all too real and just like a security threat.

Gain Risk-Free Experience Against Next-Generation Threats

Our ethical Red Teaming hackers will attack your network using the same tactics cybercriminals deploy and target the same assets and information.

Receive a Fact-Based Analysis of Your Security’s Strengths and Weaknesses

Learn exactly where your defences stand up, and where they break down during a real attack with our testing teams.

OUR METHODOLOGY

Armour Infosec Red Team relies on a systematic, repeatable and reproducible methodology. In collaboration with the organization’s leadership team, we begin by establishing the following core information and rules of engagement:

Does the red team begin its effort with information about your environment (white box) or with no information at all (black box)?
What intelligence does Mandiant already have about high-risk assets and vulnerabilities in your industry?
What objectives do you want the red team to accomplish in simulating a real-world attack?

Once the objectives are set, the red team starts by conducting initial reconnaissance. We leverage a combination of proprietary intelligence repositories, open-source intelligence (OSINT) tools and techniques to perform reconnaissance of the target environment.

Armour works to gain initial access to the target environment by exploiting vulnerabilities or conducting a social engineering attack and leverages techniques used by real-world attackers to gain privileged access to these systems.

Once access is gained, the red team attempts to escalate privileges to establish and maintain persistence within the environment by deploying a command and control infrastructure, just like an attacker would.

After persistence and command and control systems are established within the environment, the red team attempts to accomplish its objectives through any non-disruptive means necessary.

Step 1

Recon

All information potentially useful for an attacker is collected, for example: IP addresses, domain and sub-domain names, types and versions of technologies used, technical information shared on forums or social networks, data leaks…

Step 2

Mapping

This step enables pentesters to have a better visibility on the most critical and exposed elements. This step is particularly essential when the objective of the security audit is to conduct tests on all the functionalities of a target.

Step 3

Discovery

The discovery phase is an attack phase: pentesters look for vulnerabilities through manual searches complemented by automated tools. The objective is to discover as many vulnerabilities as possible on the target.

Step 4

Exploitation

The exploitation phase consists in testing possible exploitations of the flaws identified in the previous phase. The exploitation of security vulnerabilities allows evaluating their real impact and thus their criticality level.

Step 5

Reporting

In this stage, our analysts aggregate all obtained information and provide the client with a thorough, comprehensive detailing of our findings. The entire report will contain a high-level analysis of all the risks along with the final report will highlight all the weaknesses and strengths present in the application.

Step 6

Discussion & Remediation

A comprehensive discussion will be carried out to fix these vulnerabilities . We will ensure that the changes were implemented properly and all the vulnerabilities have been fixed.

WHAT CAN YOU EXPECT ?