Red Team Strategy Guide¶
How to thoughtfully approach red teaming within large organizations to maximize business impact.
Views and opinions are my own.
About This Guide¶
The Red Team Strategy Guide (RTSG) is for current and aspiring red team leaders who want to maximize their business impact. Red teaming in big companies is ambiguous work, and it's hard to nail down what really matters and actually makes a difference. This guide is not another collection of technical tradecraft or secret TTPs, rather it provides strategic insight for leaders seeking to build and mature effective red team programs that influence meaningful security improvements across their organizations. This is the "impact" we will explore throughout this guide.
Who This Is For¶
- Red team leaders who want their operations to influence significant security improvements
- Senior red teamers looking to grow beyond technical execution into program strategy and leadership
- Junior red teamers who want to understand the bigger picture early and avoid spending years figuring out what actually matters
- Security leaders evaluating how to build or mature an internal red team program
How to Use This Guide¶
Each section stands alone, so jump to whatever's relevant. If you're just getting into red team leadership, I recommend starting at the beginning.
To help with speed reading, each section begins with Takeaways that summarize the content. For readers wanting a deeper understanding, Story Time boxes throughout the guide share real-world examples and stories.
The purpose of this guide and understanding business impact.
How clarity of purpose shapes vision and direction.
How to increase demand to expand your sphere of influence.
How to choose, scope, and plan operations to ensure success.
How goals and objectives direct operator actions.
Using storytelling and facts to influence without authority.
Is your red team actually successful as a business unit?
Where to start, what to prioritize, and how to measure your progress.
Contributing¶
Have something to add? Please read through the Introduction, and if your proposed content aligns with the intent of this guide, then open an Issue or a Pull Request.