Independent cybersecurity consultancy Prism Infosec is bridging the gap between penetration testing and full-scale red team engagements with the launch of an agile red team service based on threat actor simulation and intensive testing.
PULSE gives organisations that may not have the resource to dedicate to a full-scale red team exercise the ability to assess their perimeter, endpoint security and environment from the perspective of an opportunistic threat actor using a series of flexible, repeatable and measurable tests.
Conducted over five days, using techniques aligned with the MITRE ATT&CK framework, PULSE is suitable for organisations that have invested in security tooling but lack a full-time dedicated Security Operations Centre (SOC).
Prism Infosec claims the timeframe and methods used ensure PULSE tests are not disruptive yet still subject systems to rigorous assault, with the option of customisation to meet specific requirements.
David Viola, Head of Red Team at Prism Infosec, said: “Red Teaming is a fantastic tool for exercising security tooling, staff, policies and procedures in a realistic, secure and safe manner. It does this by taking the Tactics, Techniques and Procedures (TTPs) of genuine cyber threat actors and applies them in intelligence-led scenarios which can span multiple weeks. However, not every organisation is ready for the cost, time and effort that a full red team engagement requires to deliver value for the business.
“It’s here where PULSE comes in, allowing the organisation to real-world test its systems but without the commitment or disruption associated with red teaming. The PULSE tests emulate the approach an opportunistic cyber threat actor would take when seeking to breach the perimeter, establish a foothold and compromise the environment, all within the space of a working week.”
Be First to Comment