How We Think about Red Teaming

This SpecterOps blog post defines red teaming as adversary-focused exercises that start from an assumed breach to evaluate detection and response capabilities, contrasts red teaming with penetration testing (red team adds evasion and defender-unaware operations), and advocates objective-driven engagements that produce actionable attack narratives, timelines, and IOCs to improve continuous security posture and response readiness.