Cyber Red Teaming: A Practical Guide - Couverture souple

Franz, Jerod

Couverture souple

ISBN 13 : 9798992653304

Editeur : Jerod Franz, 2025

Synopsis

Dive into the world of professional cyber attack simulation with this guide that bridges theory and real-world practice. This practical manual provides battle-tested methods for building, leading, and executing effective cyber red team operations.

Cyber Red Teaming explores the essential phases of red team operations, offering insights into:

• A phased approach to operations, including planning, preparation, execution, and recovery.
• Comprehensive coverage of operational security and risk management.
• Guidance on threat actor emulation and attack lifecycle implementation.
• Standards for professional documentation, logging, and report writing.
• Integration of purple teaming concepts for collaborative security assessments.
• DevOps framework for red team software security reviews.
• Structured approach to red team training and professional development.
• How to be a rockstar red team leader.

Table of Contents

1. Origins, Evolution, and Strategic Impact: Trace red teaming's evolution from military roots to a modern approach for testing organizational defenses and improving strategic decisions.
2. Beyond Traditional Methods: Analysis of how red teams go beyond basic security testing using advanced attack simulations and realistic threat scenarios.
3. Intro to Operations: Develop an understanding for red team operations and the four phased approach to planning, preparation, execution, and recovery.
4. Pre-Engagement Scoping: Actionable steps and information for red team scoping meetings.
5. The Art of Scoping: Understand the foundation of a successful red team engagement through a defined scope.
6. Threat Actor Emulation: Develop realistic adversarial attack scenarios by discovering how to research, analyze and emulate real threat actors’ tactics, techniques and procedures (TTPs).
7. Rules of Engagement: Learn how to create and implement effective rules of engagement document that provide a clear framework for planning, executing, and managing red team assessments.
8. Red Team OPS Protections: Understand operational security and how to identify and protect critical red team operations.
9. Risk Management: Explore the critical importance of risk management in red team operations - details strategies for safeguarding both the assessment process and client assets.
10. Attack Lifecycle Framework: An analysis of red team operations - from initial planning through execution and de-confliction.
11. Documentation & Logging: Understand how red teams should organize and log their activities for accountability and progress tracking.
12. Purple Teaming: Explore the synergy between offensive and defensive security assessments through a collaborative approach.
13. Red Team Reporting: Learn how to craft red team reports that transform technical findings into action-able intelligence while following professional standards.
14. Leadership: Learn effective leadership principles for guiding red teams and delivering successful assessments.
15. Training: Learn how systematic training and professional development create high-performing red teams.
16. DevOps: Understand how to implement a framework for conducting security reviews for red team software.
17. Recommendations: Master red team practices and strategies for conducting professional security assessments.

Détails de l'édition

• Éditeur: Jerod Franz
• Date d'édition: 2025
• Langue: anglais
• ISBN 13: 9798992653304
• Reliure: Broché
• Nombre de pages: 317
• Coordonnées du fabricant: Manufactured by Amazon on behalf of the author; https://www.amazon.fr/hz/contact-us; ; c/o Amazon Media EU S.à.r.l., 38 Avenue John F. Kennedy; Luxembourg; L-1855; Luxembourg