Putting the team in red team

**Executive summary:** This TrustedSec write-up discusses red team staffing and methodology, arguing that longer, focused engagements with a dedicated consultant better emulate real attackers and improve detection and incident response testing, and it describes the supporting internal teams (Targeted Operations, Research Unit, Application Security, Physical Security, and other SMEs) that augment red team assessments.