Adversary Emulation and Adversary simulation :
Adversary Emulation:
- we are going to mimic the exactly same TTP from the adversary or MITRE attack or the TTP’s that the adversary used in the past exactly that we are not going to go with our own techniques
Adversary simulation:
- we are going to use our own TTP’s or other TTP’s there is no force to only using the TTP’s that a adversary used in the past
TIP: record all the evidence all the commands you run while the simulation and its so good when you want to write a report
TIP: be careful to be stealth for as long as you can its okey to be caught / and finally when you obtained your objectives you can do something to finally blue team detect you at the end
Cyber kill chain :
- Reconnaissance
- Weaponization
- Delivery
- Exploitation