Red Team Strategy Guide¶
Thoughtfully approaching red teaming within large organizations to maximize business impact.
About This Guide¶
The Red Team Strategy Guide (RTSG) is for current and aspiring red team leaders who want to maximize their impact. Red teaming in big companies is ambiguous work, and it's hard to nail down what really matters and actually makes a difference. This guide is not another collection of technical tradecrafts or secret TTPs, rather it provides strategic insight for leaders seeking to build and mature effective red team programs that influence meaningful security improvements across their organizations. This is the "impact" I expound on throughout this guide.
Who This Is For¶
- Red team leaders who want their operations to drive real security improvements, not just generate reports
- Senior red teamers looking to grow beyond technical execution into program strategy and leadership
- Junior red teamers who want to understand the bigger picture early and avoid spending years figuring out what actually matters
- Security leaders evaluating how to build or mature an internal red team program
How to Use It¶
Each section stands alone. Jump to whatever's relevant. If you're new to red teaming, start at the beginning.
Sections¶
About me, purpose of the guide, defining "impact".
Why do we red team?
TODO
TODO
TODO
TODO
TODO
TODO
Contributing¶
Have something to add? Please read through the Introduction, and if your proposed content aligns with the intent of this guide, then open an Issue or a Pull Request.