This gist compiles resources relevant to red teaming, potentially discussed during the talk "Stop Playing Defense: Proactive Security with Red Teaming" at the 2025 Security Matters Conference.
Contact Info
- Red Team: How to Succeed By Thinking Like the Enemy - Micah Zenko
- Red Team Development and Operations - Joe Vest and James Tubberville
- Red Team Handbook
-
SpecterOps Blog
- High-quality technical content on red teaming, detection, and adversary simulation.
- 🔗 https://posts.specterops.io/
-
Red Team Guide
- A comprehensive community-driven resource for red teamers.
- 🔗 https://redteam.guide/
-
MITRE ATT&CK Framework
- A globally-accessible knowledge base of adversary tactics and techniques.
- 🔗 https://attack.mitre.org/
-
MITRE D3FEND Framework
- A complementary framework to ATT&CK focused on defensive techniques.
- 🔗 https://d3fend.mitre.org/
-
CISA Red Team Reports
- Official red team assessments and cybersecurity resources from the U.S. Cybersecurity and Infrastructure Security Agency.
- 🔗 https://www.cisa.gov/resources-tools/resources/cisa-red-team-assessments
-
Models for Red Team Operations
-
Threat Gets a Vote - Joe Vest
- This Week in Cybersecurity Newsletter
- 🔗 https://ired.team
- 🔗 https://book.hacktricks.wiki/en/index.html
- https://overthewire.org/wargames/bandit/ (Beginner friendly - Free)
- https://tryhackme.com/
- https://academy.hackthebox.com/
- https://portswigger.net/web-security (Web Application Specific - Free)
- Exercise and Eat Your Vegetables - Phillip Ross and Colin Glover
- Spring Training - Forrest Carver
- How to Fail at a Pentest - John Strand
- Micah Zenko - Red Teaming Insights and Examples from Beyond - DEF CON 27 Social Engineering Village
- CISO is briefed on a Red Team Engagement
https://github.com/specterops/
- Careers at SpecterOps
- Life at SpecterOps: The Red Team Dream
- Life at SpecterOps Part II: From Dream to Reality