Development and operations a practical guide


Two Person Integrity (TPI)



Download 4.62 Mb.
View original pdf
Page50/96
Date11.02.2023
Size4.62 Mb.
#60628
1   ...   46   47   48   49   50   51   52   53   ...   96
1 Joe Vest, James Tubberville Red Team Development and Operations
Two Person Integrity (TPI)
A key factor in data collection and execution is two-person integrity (TPI). Two-person integrity
(used to verify activities performed during the engagement) should be maintained at all times. A team member should review, understand, and provide a sanity check for each action/command performed. That team member should verify the actions of the executing team member as well as verify the completion of the log entry. TPI helps protect both the Red Team and the target/customer against the potential release of sensitive information, violation of legal requirements/laws, and violation of the ROE. More often, TPI prevents the Red Team from making simple errors and mistakes in operation (this is further explored in the see tradecraft guidance, consult with peers section).


Key Chapter Takeaways
Engagement Planning is crucial to effectively managing potential engagement risks, successfully executing to achieve the desired goals and objectives, and providing the information required to improve both organizational and defensive capabilities. Although all planning elements play an important role in engagement success, be especially mindful to place additional attention on:
Roles and Responsibilities
Rules of Engagement
Threat Planning
Operational Impacts
Deconfliction
Data Handling
Funding


Homework
1)
Create a red team operations charter and methodology guide
2)
Create a roles and responsibility document
3)
Create a threat profile template
4)
Develop a standard ROE template
5)
Develop a deconfliction template
6)
Develop a data handling guideline
7)
Continue adding definitions to the red team lexicon


Engagement Execution
Engagement execution starts when event information and planning documentation is finalized, and preparatory actions for conducting the engagement begins. The execution phase is simply the practical application of the "why" and "how" from planning (think infrastructure buildout and engagement activities).



Download 4.62 Mb.

Share with your friends:
1   ...   46   47   48   49   50   51   52   53   ...   96




The database is protected by copyright ©ininet.org 2024
send message

    Main page