// What it covers
The scope of the work.
01Network discovery & mapping
02Active Directory attack paths
03Kerberos attacks
04Lateral movement
05Privilege escalation
06Credential exposure
07Network segmentation
08Relay & spoofing attacks
// What we need from you
The basics below — everything else is worked out together in the free scoping call.
▸Internal IP ranges in scope
▸How we get access — on-site, VPN or a test machine
▸Systems that must not be touched
▸A preferred testing window
// What you receive
A mapped path from first foothold to compromise, with the fix that breaks each step.
Plus an executive summary for leadership and a retest of every fixed finding.
// How it runs
STEP 01ScopeFree call to agree targets, approach and timeline.
STEP 02TestManual-first testing. Critical issues flagged straight away.
STEP 03ReportPrioritised findings with clear, practical fixes.
STEP 04RetestYou fix, we verify and close each finding.
// More red team services