Modern Red Team Tradecraft: Bridging the Gap with Real-World Espionage
Sajal Thomas examines the technical gap between commercial red teams and state-sponsored APT groups, sharing advanced tradecraft to elevate offensive testing.
Summary
The Evolving Landscape of Threat Actor Sophistication
Nation-state cyber espionage groups operate with patience, bespoke infrastructure, and zero-day tooling that traditional penetration tests rarely replicate.
Bridging the Methodology Gap in Red Teaming
Sajal Thomas analyzes advanced operational concepts—including domain fronting alternatives, long-dwell in-memory persistence, and operational risk mitigation.
Executing Covert Lateral Movement and Data Staging
The speaker demonstrates navigating complex enterprise networks using living-off-the-land techniques without generating anomalous endpoint security telemetry.
Elevating Enterprise Resilience Through Realistic Simulations
The presentation encourages red teams to shift from speed-based pwning to realistic, objective-driven adversary emulation that truly tests detection engineering.
Related talks
Red Team Village·38 min
An introduction and technical overview of CyberWraith, the Red Team Village's open-source command-and-control and engagement infrastructure platform.
Adversary Village·1 hr 46 min
Fatih Ozavci
Fatih Ozavci shares systematic methodologies for developing custom tradecraft, repurposing public tools, and tuning evasion for high-maturity adversary simulations.
Main Stage·21 min
Dimitry Snezhkov
Dimitry Snezhkov introduces Racketeer, a modular adversary emulation framework designed to safely simulate end-to-end ransomware operations and test SOC response.