Red Teaming
Red Teaming by Bryce Hoffman is a thought-provoking read.
Shostack + Friends Blog
Posts in category “adversaries”
Think like Sieged-sec?
Yet again, attackers surprise us
Think like Alph-V?
Recently, ransomware operators AlphV were in the news for telling the SEC that AlphV’s victim, MeridianLink, had not filed the relevant SEC form 8K about their breach. While this is something between clever, humorous and outrageous, I’d like to ask a question of those who advocate for adversarial thinking: Did you predict this?
Adversarial Thinking and Wargames
Thinking about adversarial thinking
Who Are We Kidding with Attacker-Centered Threat Modeling?
Don't go into Threat Modeling with this mindset.
Modeling Attackers and Their Motives
There are a number of reports out recently, breathlessly presenting their analysis of one threatening group of baddies or another. Most readers should, at most, skim their analysis of the perpetrators. Read on for why.