How I Got COVID in a Red Team SE and Physical Intrusion
Daniel Isler recounts an authorized multi-vector physical intrusion and social engineering red team engagement conducted during the COVID-19 pandemic.
Summary
The Value of Full-Scope Multi-Vector Red Teaming
True adversary emulation cannot rely solely on network exploitation; comprehensive assessments must incorporate physical security breaches and human social engineering.
Planning a Multi-Vector Physical and Social Engineering Engagement
Daniel Isler details planning an authorized red team simulation against high-security corporate facilities amidst strict pandemic restrictions.
Executing Physical Infiltration and Social Engineering
Isler recounts tailgating past security checkpoints, cloning access badges, manipulating building staff, and planting rogue hardware implants on internal LANs.
Lessons Learned and Pandemic Operational Challenges
The author shares the unexpected personal hurdle of contracting COVID-19 during the assessment, emphasizing the importance of adaptability and safety protocols in physical security testing.
Related talks
Social Engineering Village·51 min
Jayson Street shares candid war stories, critical missteps, and key operational lessons learned from physical security engagements.
Village Presentations·56 min
Noah Beddome
Noah Beddome teaches applied de-escalation strategies for physical penetration testers, turning hostile security confrontations into smooth escapes.
Daniel Isler
Applying photojournalism principles and invisible theater to seize decisive moments in physical social engineering.