Thread by @_wald0

(1/6) One of the most powerful and valuable aspects of a red team assessment is its ability to cut straight through any pre-existing notions of a network's security posture. 🧵

(2/6) The facts of a devastating attack path, well-executed, cut through egos, politics, ineffective operational momentum, and spell it out very plainly for everyone to see: the red team got in, took control of everything, and you couldn't stop them.

(3/6) Getting your teeth kicked in like that hurts, but professional red teams know how to turn that pain into value for the customer, and help them see it as an opportunity to improve.

(4/6) Any red teamer who's been around long enough has seen the same thing: "you'll never get in" evolves into "well if we would have done X..." which finally evolves into "ok how do we actually deal with this?"

(5/6) Some folks in our field hold this idea that Active Directory isn't that big of a risk: I'm here to tell you that this perspective is dangerous and is the exact perspective that many admins have before getting THEIR teeth kicked in, either by a red team or a real adversary.

(6/6) You shouldn't take my word for it though. I put this blog together so you, the AD security practitioner, can see *for yourself*, *for free*, how big of a problem attack paths are in *your* AD: medium.com/p/28147dedb73b