red-team-tactics

| Recon | Map attack surface | | Initial Access | Get first foothold | | Execution | Run code on target | | Persistence | Survive reboots | | Privilege Escalation | Get admin/root | | Defense Evasion | Avoid detection | | Credential Access | Harvest credentials | | Discovery | Map internal network | | Lateral Movement | Spread to other systems |

| Collection | Gather target data | | C2 | Maintain command channel | | Exfiltration | Extract data |

| Passive | No target contact, limited info | | Active | Direct contact, more detection risk |

Принципы тактики красной команды, основанные на MITRE ATT&CK. Фазы атаки, уклонение от обнаружения, отчетность. Источник: automindtechnologie-jpg/ultimate-skill.md.