https://unclesp1d3r.github.io/series/red-team-operations/Recent content in Red Team Operations on UncleSp1d3r BlogHugo -- gohugo.ioen© 2026 UncleSp1d3rFri, 14 Aug 2026 13:16:18 -0400https://unclesp1d3r.github.io/posts/2023-05-22-red-teaming-scenario-based-testing/Mon, 22 May 2023 00:00:00 +0000https://unclesp1d3r.github.io/posts/2023-05-22-red-teaming-scenario-based-testing/This article explains Scenario-Based Testing (SBT) in detail, its benefits, tools and techniques used, and provides examples of how SBT can be used in Red Team Exercises to identify vulnerabilities and weaknesses in an organization’s security defenses.https://unclesp1d3r.github.io/posts/2023-04-28-advanced-red-team-exercises-supply-chain-attacks/Fri, 28 Apr 2023 00:00:00 +0000https://unclesp1d3r.github.io/posts/2023-04-28-advanced-red-team-exercises-supply-chain-attacks/Part three of the Red Team Operations series. How operators simulate supply chain attacks on engagement, the canonical real-world case studies that justify the budget (SolarWinds, NotPetya, CCleaner, Kaseya, Codecov, 3CX, MOVEit, XZ Utils), the engagement-scoping considerations that make supply-chain testing different from regular red team work, and the defender controls (SBOM, signing, build provenance via SLSA, dependency review) that actually move the needle.https://unclesp1d3r.github.io/posts/2023-04-14-red-team-exercises/Fri, 14 Apr 2023 00:00:00 +0000https://unclesp1d3r.github.io/posts/2023-04-14-red-team-exercises/An operator’s walkthrough of red team engagement types (network pentest, social engineering, physical, red-vs-blue, purple team, multiscenario, full spectrum, tabletop), the five-phase methodology that structures most engagements (recon, scanning, exploitation, post-exploitation, reporting), the actual tooling stack at each phase, and the case studies (DoD Cyber Flag, Verizon DBIR-derived attack-pattern data) worth grounding the work in.https://unclesp1d3r.github.io/posts/2023-03-13-red-teaming-basics/Mon, 13 Mar 2023 00:00:00 +0000https://unclesp1d3r.github.io/posts/2023-03-13-red-teaming-basics/A working operator’s view of red teaming versus pen testing, the Unified Kill Chain as a practical mental model rather than a theoretical framework, how modern C2 infrastructure is actually built (and why domain fronting isn’t the answer anymore), purple teaming as collaborative tuning, deconfliction with the white cell, and the operator-side OPSEC habits that decide whether you finish the engagement quietly.