Security News > 2020 > September > Red Team — Automation or Simulation?

What is the difference between a penetration test and a red team exercise? The common understanding is that a red team exercise is a pen-test on steroids, but what does that mean?

The first, red team automation, has the obvious advantage of increasing the operational efficiency of a red team.

Red team automation can support red team activities, but the value is limited, and most red teams have their own set of homegrown tools developed for the same purpose.

The benefits of red team simulation extend beyond operational efficiency for both in-house red teams and companies that provide red team services.

Even with red team simulation, the human factor remains key in assessing the result of an exercise and providing guidance to improve incident management and response procedures, but it makes red team exercises accessible and achievable to a larger market, where cost is a limiting factor.

News URL

http://feedproxy.google.com/~r/TheHackersNews/~3/Q02nZBUR0JA/red-team-penetration-test.html