A common Red Team workflow includes:
- Recon & intelligence gathering
- Initial access (phishing, exposed services, credentials)
- Privilege escalation
- Lateral movement
- Persistence
- Data exfiltration simulation
- Reporting & lessons learned
How does your team structure engagements?