The second TIBER-EU phase: targeted threat intelligence and scenario selection by the threat intelligence provider, the red team test plan, and at least 12 weeks of active red team testing against the flags under control team and test manager supervision.
The threat intelligence step: the optional generic threat landscape, collection of target and threat intelligence, selection of at least three scenarios including the optional scenario-X, and the content and approval of the targeted threat intelligence report.
How the red team turns the targeted threat intelligence into an approved test plan: scenario and attack path detail, allowed and forbidden techniques, leg-ups, in, through and out scheduling, reporting and risk controls.
Executing the attack scenarios against live production systems for at least 12 weeks: leg-ups, weekly updates, handling detection by staff, suspension in exceptional circumstances, logging of all actions, and the restoration procedures that end testing.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.