skills.rest
VoDaiLocz
VoDaiLoczCOMMUNITY
Explore all skills by this author →
GitHub

red-team-tactics

Guide red team tactics using the MITRE ATT&CK framework.

24|3|Updated Jan 30, 2026
Search Tags:#security testing#MITRE ATT&CK#adversary simulation#red teaming#attack phases
One-click install
npx skills add https://github.com/VoDaiLocz/kilo-kit-mcp --skill red-team-tactics-vodailocz
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: red-team-tactics
Source: https://github.com/VoDaiLocz/kilo-kit-mcp/tree/main/skills/security/red-team-tactics
Command: npx skills add https://github.com/VoDaiLocz/kilo-kit-mcp --skill red-team-tactics-vodailocz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive guide to red team tactics, enabling users to simulate attacker behavior and improve their security defenses.

Core Features & Use Cases

  • Attack Phases Overview: Understand the MITRE ATT&CK framework's attack lifecycle and phases.
  • Principles of Reconnaissance: Learn passive and active reconnaissance techniques and information targets.
  • Initial Access Vectors: Explore different vectors like phishing, public exploits, and supply chain attacks.
  • Privilege Escalation: Understand techniques for privilege escalation on Windows and Linux systems.
  • Defense Evasion: Learn about key techniques such as LOLBins, obfuscation, and operational security.
  • Lateral Movement: Understand credential types and movement paths within a network.
  • Active Directory Attacks: Learn about Kerberoasting, AS-REP Roasting, DCSync, Golden Ticket, and more.
  • Reporting Principles: Document the full attack chain and detection gaps.
  • Ethical Boundaries: Define the ethical boundaries of red teaming.
  • Anti-Patterns: Avoid common mistakes in red teaming.

Quick Start

Run the 'red-team-tactics' skill to access the full guide on red team tactics and attack phases.

Frequently Asked Questions about red-team-tactics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is red teaming and how does the MITRE ATT&CK framework map attack phases?▼

Red teaming simulates adversary behavior to test security defenses, mapping attack phases like reconnaissance and lateral movement using the MITRE ATT&CK framework. It provides a comprehensive lifecycle overview for security professionals to understand attacker techniques.

How do I simulate initial access vectors and privilege escalation during adversary simulation?▼

Adversary simulation uses initial access vectors like phishing and supply chain attacks, followed by privilege escalation techniques on Windows and Linux systems. This red teaming process mimics real attacker behavior to identify system vulnerabilities and defense gaps.

What techniques are used for defense evasion and lateral movement in red team operations?▼

Defense evasion in red team operations utilizes LOLBins, obfuscation, and operational security. Lateral movement leverages credential types and network movement paths to expand access, closely simulating how adversaries navigate internal networks undetected.

Can I learn Active Directory attacks like Kerberoasting and Golden Ticket for security testing?▼

Security testing includes simulating Active Directory attacks such as Kerberoasting, AS-REP Roasting, DCSync, and Golden Ticket. These red team tactics help identify critical weaknesses in domain controller environments and credential management systems.

What are the ethical boundaries and common anti-patterns in red teaming?▼

Red teaming requires strict ethical boundaries to define operational scope and avoid unauthorized damage. The guide also highlights anti-patterns, helping operators avoid common mistakes in reconnaissance, execution, and reporting during adversary simulation.

How should I document detection gaps and the full attack chain in red team reporting?▼

Red team reporting documents the full attack chain and identifies specific detection gaps encountered during adversary simulation. This provides actionable insights for security teams to improve defenses based on the MITRE ATT&CK tactics demonstrated.

Related Skills

Explore More Software Engineering Skills→
RooseveltAdvisorsRooseveltAdvisors
1

Recon

Automate network reconnaissance for domains, IPs, and netblocks.

Community
Advanced
EntroVyxEntroVyx
3

osint-methodology

Provides a structured 5-stage reconnaissance framework for authorized red-team campaigns.

Community
Advanced
dgkngkdgkngk

red-team-tactics

Detail red team tactics and adversary simulation using the MITRE ATT&CK framework.

Community
Intermediate
SensLiaoSensLiao

security-pentest-exploitation-planning

Plan exploitation and adversary simulation for authorized penetration tests.

Community
Advanced