TTPs

Tactics, Techniques, and Procedures (aka. my notes)

Red Team Resources

Resources to define, understand the execution, and goals of Red Teaming. These resources have an emphasis on Enterprise Red Teaming in the cloud

General

• Red Team - Wikipedia
• Hacking Google | Red Team - Google
• Red teaming 101: What is red teaming? - Evan Anderson (IBM)

• Meta Tech Podcast - Offensive Security at Meta’s Red Team X - Meta

  TTP

  • Mitre Att&ck - Mitre
  • NIST Glossary - Tactics, Techniques, and Procuedures - NIST
  • NIST Glossary - Tactic, Technique, and Procedure - NIST
  • What’s in a name? TTPs in Info Sec - Robby Winchester
  • Red Team Guide - RED TEAM TRADECRAFT AND TTP GUIDANCE - Joe Vest and James Tubberville

Execution

• Red Teaming: Using Cutting-Edge Threat Simulation to Harden the Microsoft Enterprise Cloud - Scott Field
• GitLab - Red Team - Chris Moberly (Gitlab)
• Red Team Operations with Cobalt Strike (2019) - Raphael Mudge
• Cobalt Strike Blog - Raphael Mudge
• Dirty Red Team Tricks - Raphael Mudge and Rob Fuller
• Dirty Red Team Tricks 2.0 - Raphael Mudge
• Force Multipliers for Red Team Operations - Raphael Mudge
• Flying a Cylon Raider - Raphael Mudge
• In Memory Evasion (2018) - Raphael Mudge
• Red Teaming Back and Forth 5ever - Fuzzynop
• Bridging the gap - Lesson in adversarial tradecraft - harmj0y & enigma0x3
• Tradecraft Security Weekly - Security Weekly
• Red Team Infrastructure Wiki - bluescreenofjeff
• Red Teaming Experiments - spottheplanet
• Assumed Breach: The Evolution of Offensive Security Testing - Jason Lang (TrustedSec)

Breaches & Incidents

• Cost of a Data Breach Report - IBM
• Data Breach Investigation Report - Verizon
• What is the cost of a data breach? - Michael Hill (CSO online)
• 89 Must-Know Data Breach Statistics 2022 - Rob Sobers (Varonis)
• Annual Data Breaches US 2005 - Current - Statista Research Department
• CYBERSECURITY INCIDENT TRACKER - Board CyberSecurity
  • SEC FORM 8-K - U.S. Securities and Exchange Commission
• Significant Cyber Incidents - CSIS
• Awesome Annual Security Reports - Jacob Wilson

Books

• Red Team Development and Operations: A practical guide - Joe Vest and James Tubberville
• Red Team: How to Succeed by Thinking Like the Enemy - Micah Zenko
• Red Teaming - How Your Business Can Conquer the Competition by Challenging Everything - Bryce G. Hoffman