Adversary simulation: what you need to know
UK NCSC publishes guidance on adversary simulation, comparing full spectrum and assumed breach approaches across prerequisites, testing, and reporting phases.
NCSC guidance describes two adversary simulation approaches: full spectrum, starting outside the network with an end-to-end attack, and assumed breach, starting from an internal foothold. The preferred methodology spans three phases - prerequisites (scoping, passive reconnaissance, preparation), testing (active reconnaissance, initial access, internal phase, cleanup), and reporting. The document distinguishes adversary simulation from penetration testing and stresses customer-defined objectives and minimal information sharing.
- NCSC outlines full spectrum and assumed breach adversary simulation approaches
- Methodology covers three phases: prerequisites, testing, and reporting
- Assumed breach bypasses initial access to test lateral movement to high-value targets
- Adversary simulation differs from penetration testing in required information sharing
- Vendors
- NCSC
- Products
- Windows
- Organizations
- NCSC
- Countries
- United Kingdom
From the original article
7 min read at ncsc.gov.uk
Adversary simulation ('red teaming') tests your ability to prevent, detect and respond to cyber attacks.
ncsc.gov.uk
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.