Performing the steps to compromise a system
One of the main tasks of the Blue Team is to understand the cyber kill chain fully, and how it can be used against an organization's infrastructure. The Red Team, on the other hand, can use simulation exercises to identify breaches, and the results of this exercise can help to enhance the overall security posture of the organization.
The core macro steps to be followed are:
- Deploy the payloads
- Compromise the operations system
- Compromise the web-based system
Notice that these steps will vary according to the attacker's mission, or the Red Team's target exercise. The intent here is to give you a core plan that you can customize according to your organization's needs.
Figure 30: Sony employees had this desktop background on their computers
The preceding screenshot is the wallpaper when Sony was hacked in 2014, the attackers left a message on every desktop stating they were hacked.
