Red teaming
A scenario from reconnaissance to objective, run without warning the defenders. We test detection, procedures and response time, not just systems.
Scope
- Reconnaissance and phishing
- Initial access and privilege escalation
- Lateral movement and Active Directory
- Agreed objectives (flags)
- Working with the blue team (purple)
What you get
- Step-by-step attack narrative
- Detection and response assessment
- Recommendations for the defenders
- Debrief workshop
What red teaming is
Advanced security testing that simulates real attacks on an organisation's IT infrastructure. The goal is to identify security gaps, evaluate how well protection mechanisms work and check how ready incident response teams are. The simulation tests not only technical controls but also processes, policies and how people react.
How it differs from a penetration test
A penetration test focuses on technical vulnerabilities within a defined scope. Red teaming is broader: it also covers organisational processes, human responses and security policies, giving a fuller picture of your security posture. It pursues one business objective — such as access to customer data — by any route, and measures whether and when the organisation notices.
Types of tests
- Social engineering — phishing, pretexting and baiting; simulations by email, phone and SMS test how easily sensitive data can be obtained.
- Targeted attacks — carefully planned scenarios aimed at selected people, departments or assets that are critical links in your security.
- Technical testing — system and device configuration, web and mobile applications, exploration of potential attack vectors.
- TLPT (Threat-Led Penetration Testing) — tests driven by realistic threat scenarios, in line with industry and regulatory guidance such as DORA.
- Procedure and response analysis — how well attacks are detected, how fast and adequate the response is, crisis procedures and internal communication.
- Physical attacks — unauthorised entry attempts, manipulation techniques and the resilience of access control systems.
What you gain
- Holistic security — technical, organisational and human assessment in one engagement.
- Greater resilience — an organisation prepared for real threats, with fewer incidents.
- Better processes — faster incident response and clearer communication.
- Regulatory compliance — ISO 27001, DORA and NIS2.
Who it is for
Organisations that already have baseline controls and their own SOC team or provider — and want to know whether it all works under pressure.
What our clients say
Working with Unshade guarantees professionalism and the highest standards. The team's flexibility, discretion and commitment were outstanding. I highly recommend Unshade as a reliable partner.
Read on the blog
Introduction to Password Cracking #1 Intro
So you want to be a password cracker, huh? Let us show you how it's done. In this post you will learn how to crack passwords with hashcat dictionary attack.
Introduction to Password Cracking #2 Wordlists
In the previous post, we learned about one of the attack methods that hashcat offers - the dictionary attack. To perform such attack we need dictionary - a good dictionary,
CrackMeIFYouCan 2022 DEFCON Writeup
What's that? CrackMeIfYouCan on DEFCON is one of the most popular hash cracking contests in the wild. Best teams in the world compete on a 48h challenge to crack as many hashes as…
Request an anonymised report
See what our penetration test report looks like: the structure, findings with PoC, CVSS ratings and recommendations. We send an anonymised version to your work email.
- Executive summary
- Findings with proof of exploitation
- CVSS risk ratings
- Step-by-step remediation guidance
The form is being set up. Write to us directly: contact@unshade.pl