Open Daily: 10am - 10pm | Alley door pickup 10am - 7pm 3038 Hennepin Ave Minneapolis, MN
612-822-4611

  • Open Daily: 10am - 10pm
    Alley-side Pickup: 10am - 7pm

    3038 Hennepin Ave Minneapolis, MN
    612-822-4611

Open Daily: 10am - 10pm | Alley-side Pickup: 10am - 7pm
3038 Hennepin Ave Minneapolis, MN
612-822-4611
The Effective Red Team: Adversary Emulation Inside the Enterprise

The Effective Red Team: Adversary Emulation Inside the Enterprise

Edgeworth, Trevin
Potti, Noah
Potti, Jordan

Paperback

Business GeneralComputer SecuritySystem Administration

Publisher Price: $69.99

PREORDER - Expected ship date February 16, 2027

ISBN10: 1718505108
ISBN13: 9781718505100
Publisher: No Starch Press
Published: Feb 16 2027
Pages: 504
Language: English
Build a red team that turns successful attacks into better security.

Your red team got domain admin. Great. Now what changed?
The hardest part of red teaming starts after the breach: building a program that survives contact with the rest of the organization and turns offensive work into better security.

The Effective Red Team moves from strategy to tactics in the order you'll meet the problems. You'll assess your organization's real risks and culture, define a mission and scope stakeholders will back, build partnerships with defenders and leadership, hire and develop operators, choose metrics that don't lie, and communicate uncomfortable findings so they get fixed.

Then you'll run operations. You'll design an engagement, build quiet, reusable attacker infrastructure, follow a complete case study emulating the ShinyHunters threat actor, and turn the results into reports, outbriefs, and detection rules engineers will act on. Part IV covers the tactical methodologies themselves: initial access, persistence, expanding access, and acting on objectives in cloud-heavy enterprise environments.

Seven appendixes give you the working documents: rules of engagement, a process document, a finding template, a development matrix, and a sample operation report.

Trevin Edgeworth, Noah Potti, and Jordan Potti built and led the red teams at American Express, Capital One, and Symantec, and wrote this from that experience. It is for practitioners building or running internal red teams, and assumes working knowledge of Active Directory, cloud infrastructure, and networking.

Finding a way in is half the job. The real win is making sure the same attack never works twice.

Also in

System Administration

View All