Microminder’s red team operations begin with consultations between our infosec teams and your IT heads. During this consultation period, we will agree on the target of red team activities, the testing timetable and the types of cyber-attacks that will be carried out.

These are the goals of the red pen test and may include activities such as physical entry to sensitive business locations or breaching networks and servers. At the end of this step, the client will need to grant a letter of authorisation, allowing Microminder’s red team hackers to conduct these activities.

Red teams consider various factors to determine how the actual penetration test will be conducted. These factors include looking at possible social engineering tactics, errors in cloud-based infrastructure, potential vulnerabilities, weak authentication mechanisms and poorly hidden subdomains.

Using the mapped out targets and exploitation methods, the Microminder red team will launch an attack on the organisation’s hardware and software. Our aim will be to breach networks, servers or applications and use social engineering techniques to compromise systems. We will also try to bypass physical security measures and gain access to offices and other properties.

Once we gain access to your systems, we will try to escalate security privileges, install malicious software and disable network security tools.

The final step of this process is a red team assessment to determine if the initial agreed-upon goals have been reached. Both teams will collate evidence of the successful breaches and the systems they were able to infiltrate. This information is then used to develop a report that outlines the steps taken during red team penetration testing.

At Microminder, we ensure to include all relevant details, such as the attack plan, methods of exploitation, and the results of the cyberattack in the final report. The report will also include specific areas where a breach was either successful or unsuccessful. This feedback is used to provide recommendations on how the business can improve the existing security measures.