Red Team Assessment
Razorthorn Red Team Assessment services are performed by our CREST certified ethical hackers. Our ethical hackers are highly trained and experienced red team experts who provide a customised experience to each customer. The assessment is an intelligence-led security designed to thoroughly test organisations’ cyber resilience plus threat detection and incident response capabilities.
The Red Team Assessment will mirror the conditions of a genuine cyber attack by utilising the same tactics, techniques and procedures (TTPs) used by criminal adversaries. Based on the initial results, our red team leverages custom tools, exploits, and methodologies to break into the clients environment. Our full range of red team assessments includes threat intelligence, penetration testing, comprehensive open source intelligence (OSINT), digital & physical social engineering, APT simulations, and many more.
The multiple methods used ensures that engagements are as realistic as possible and fully challenge the effectiveness of technology, personnel and processes. Typically, engagements are performed on average over a 30 day window, so that the assessment mirrors a ‘real’ world intrusion as closely as possible.
Benefits of the Razorthorn Red Team Assessment
- Identifies the risk and susceptibility of attack against key business information assets
- Techniques, Tactics & Procedures (TTPs) of genuine threat actors are effectively simulated in a risk managed and controlled manner
- Assesses the organisation’s ability to detect, respond and prevent sophisticated and targeted threats
- Uncover weaknesses missed by other forms of testing
- Identify methods that could be used to disrupt business continuity
- Understand the effectiveness of incident response plans
- Obtain guidance on future security investments
The Razorthorn Approach
Razorthorn’s Red Team Assessment is designed based on an organisation’s individual objectives, such as cracking credentials of admins to applications, gain admin access to exchange and/or remove an email from target mailbox and send as specific user obtain access to sensitive data, exfiltrate core file system data without being detected, successful CNC establishment, weaponise and install recon software.
Red team assessments typically follows an intelligence-driven, black-box methodology to rigorously test organisations’ detection and response capabilities. This approach is likely to include:
- Reconnaissance (OSINT)
- Staging and weaponization
- Attack delivery
- Exploitation
- Establishing a backdoor (C&C)
- Installing multiple utilities
- Privilege escalation, lateral movement and data exfiltration
- Maintaining persistence
Reporting
Razorthorn’s comprehensive reports outline any vulnerabilities uncovered, including how they may be confirmed and exploited in future testing. The activities and approaches that took place will be
documented as well as observations and remedial recommendations.
The report will be written in a way that it can be used to plan and develop future encounters. A debriefing session will also be arranged to walk you through the various breach scenarios emulated in the red team assessment.
The report will consist of two parts:
- Management Summary – a clear, non-technical and precise overview on the outcome of the assessment.
- Technical Report – designed for technical staff. The main purpose of the report is to show strengths and weaknesses of the environment, and to advise on how to improve its security.
Red Team Assessment Enquiry
Optimise your cyber security posture with powerful breach and attack simulations from Razorthorn’s CREST certified ethical hackers.