Concepts for the Red Team Mindset: Point Red Teaming
Point red teaming, originally coined and described by Mark Mateski of the Red Team Journal, is tactical, short-term, and focused on immediate needs assessment. It helps enterprises find and plug existing holes. It’s roughly equivalent to pen-testing but can include other techniques as well. Point Red Teaming efforts tend to be one-off, and even when coordinated at a project level, they still maintain the point focus. Because they’re one-off, it’s hard to connect the dots, find the patterns, and project those patterns into the future. What’s more, running lots of point red teams doesn’t mean you see the big picture; in fact, it may obscure the big picture while leading you to believe you’ve mastered it.