Our hackers think like attackers, and use the same tools, techniques and practices to compromise organizations.

Even organizations with strong security controls and processes may not be able to detect and contain a breach quickly. If your security teams do not practice their detection and response capabilities the likelihood of effectively executing them in a real breach scenario is greatly reduced.

When we conduct an Adversary Simulation, we evaluate how well your security team can detect and respond to a real-world attack, using the tactics, techniques and procedures as advanced attackers.

Prepare your internal security team or security operations center (SOC) through a controlled, realistic attack simulation. By deploying various traditional and non-traditional penetration testing and social engineering techniques over a realistic timeline, we help you ascertain that your organization can detect and respond to the latest types of cyberattack

Attack scenarios can be crafted to emulate specific types of threat actors (enthusiasts, organized groups, and cybercriminals). We employ both traditional and non-traditional techniques to test your resilience against intrusions, data exfiltration, fraud, internal attack, corporate espionage, and physical compromise.

While a standard penetration test is focused on broadly identifying and exploiting vulnerabilities in your network and applications, adversary simulation exercises evaluate the effectiveness of your security controls and the security team’s ability to identify and contain an actual attack. Exercises are focused on emulating an advanced threat actor, using stealth, subverting established defensive controls, and identifying gaps in your defensive strategy.

Example Scenarios

Radical Security has a portfolio of Red Team scenarios covering a range of different attack scenarios based on the real-world incidents we see, and you read about in the news

DDoS Attack:
Tabletop simulated distributed denial-of-service (DDoS) attack involving security response and coordination within multiple operational teams

Advanced Persistent Threat: Simulated advanced persistent threat (APT) intrusion involving incident detection, response, malware analysis and forensics capabilities, and fraud monitoring

Social Engineering:
The attacks performed can be used to steal employee’s confidential information or get physical access to locations and digital assets.

Data Exfiltration:
Involves various methods to siphon data out of an enterprise network, ranging from basic to sophisticated scenarios

Hybrid Attack:
Combine all of the above to see how resilient your environment and security culture truly are. We have conducted engagements where the goal was to “gain physical access to the data center” or “get into my secret prototyping lab.”

Timeline and Duration:
Penetration tests are usually for a very specific, time-boxed amount of time, but attackers are under no such limits. Testing will be randomized over a pre-determined period of time that lends itself to more thorough results

Coverage Across Your Organization
Red Team exercises are conducted to practice and foster security awareness and communications between teams and identify potential deficiencies. A Red Team exercise covers three facets of security:

People/Cultural Vigilance
Your people are often the weakest link. We can test awareness of social engineering and physical security controls like gates, locks, sensors, etc.
Technology/Assets and Controls
Targets existing and/or planned technology assets or systems, configurations, and vulnerabilities

Processes/Security Response
What actually happens in an attack? How will your teams respond? How will they escalate and coordinate with other teams to contain the incident?

At the end of an engagement, we review the Indicators of Compromise (IoCs) that your security team believed to be attributed to our attacks. We will jointly review these IoCs and incorporate any successful controls/detections into the report timeline. Our team will work closely with your staff to explain the attacks conducted and provide recommendations to improve their prevention, detection, and response capabilities.

A Red Team engagement can provide clients with an attacker’s perspective and deep insight into the security strengths and weaknesses of their cloud and on-premises environments. Engagements will also define a baseline from which future security improvements can be measured.