Red Team & TAS
We test attack paths from external entry points to critical systems through controlled scenarios, assessing where your team can detect and stop an attack.
01 / ASSESSMENT
Controlled adversary simulation examines external entry points, Active Directory identities, excessive privileges and paths to critical assets. Scenarios map to MITRE ATT&CK; collaborative exercises with defenders validate detection and response.
PRACTICAL SCENARIOS / TTP
TTPs are an adversary’s tactics, techniques and procedures. We analyse these approaches and select scenarios for your environment and the scope agreed in writing, connecting each assessment result to practical defensive guidance.
Public services and remote access form the attack surface. Examine their relationships to determine whether one weakness opens a path to another system. The result is an evidenced path to a business asset, with the points where defenders can break it.
Active Directory and Entra ID manage workforce, device and cloud access. Assess Kerberos delegation, AD CS certificate services, service accounts and cloud roles. Explain the conditions under which an ordinary identity can gain excessive privileges, and how to close that path.
Reproduce agreed MITRE ATT&CK behaviours with the defenders. Compare evidence and alerts in endpoint protection and central event analysis, or EDR and SIEM. Each scenario produces a detection gap, supporting evidence and a concrete rule-improvement task.
02 / OUTCOMES
Work proceeds under the system owner’s written authorisation, a contract and a confidentiality agreement. Assets, methods, timing, stop conditions and data handling are defined before work begins.
Send your requirements through CyberTrust. We will clarify asset count, assessment depth and expected outcomes with you, then set out timing and pricing in the proposal.