What problem does it solve?
This Skill streamlines the planning and execution of red team engagements, helping security professionals simulate attacks and test their defenses effectively.
Core Features & Use Cases
- Engagement Planning: Build structured attack plans from MITRE ATT&CK technique selection, access level, and crown jewel targets.
- Technique Scoring: Score techniques by effort and detection risk.
- Choke Point Identification: Identify critical techniques that can block multiple attack paths.
- OPSEC Risk Assessment: Assess potential detection risks and recommend mitigations.
- Crown Jewel Targeting: Focus on high-value targets to measure engagement success.
- Use Case: A security team wants to test their defenses against a potential attacker. They use this Skill to plan an engagement that simulates an attack from the outside, focusing on high-value assets like domain controllers and databases.
Quick Start
Use the red-team skill to plan an engagement with external access, targeting specific MITRE ATT&CK techniques and crown jewels.