The Offensive Approach to Cybersecurity
summary
Describes an offensive cybersecurity approach where long-duration red team engagements (months, not short pentests) emulate real attackers using a Mandiant-derived methodology, custom C2 and malware, plus phishing and vishing campaigns. Measures detection and response (MTTD/MTTR) using EDR/XDR/NDR telemetry, highlights that 70–80% of breaches start with phishing, warns about cloud and supply‑chain risks and requires contractual signoff with cloud providers, and advises prioritized remediation while avoiding tests of MS365/SaaS environments.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:22Cyberoffensive challenges
- 5:11Penetration testing and Purple Team
- 8:00What is a RED Team
- 13:00Adversary emulation and OPSEC
- 15:06RED Team methodology
- 18:17Preparing a RED Team
- 20:24RED Team scope importance
- 23:54Reporting and remediation plan
- 25:41Purple Team and conclusion
related talks
54mHacked in hours: Red team assessments unveiling vulnerabilities
28mBeyond Penetration Testing: Developing a Defensive Cyber-Workforce
49mTraining for Incident Response: The Red, the Blue, and the Ugly
38mCyber risk management: Bringing security to the boardroom
42mRed vs. Bank: Surviving a Three Year Red Team
28mImplementing Critical Cybersecurity Controls in a DevOps Environment
32mHow to Orchestrate a Cyber Security Incident Tabletop Exercise
24mThreat Response Needs New Thinking. Don't Ignore This Key Resource.