(1)Pentest Review/Alternatives to Pentests Flashcards
What happens after a pentest is done?
When a pentest is done, the pentester and/or their org prepares an exhaustive report detailing what was attempted, what was accomplished, and how to fix whatever vulnerabilities we discovered.
Why is the pentest report so important?
A pentest report is so important because it tells the company where their opportunities are and allows them to create training docs and programs to educate users or to create fixes for the system issues.
Other than basic information about the results of the test, what else does the pentest report contain?
What specific individuals may be given this information and why?
Other than basic information about the results of the test, the pentest report also contains very detail appendixes that include specific results of specific tests.
These results may be shared with system admins to help fix technical issues on the system.
What other activity can be used instead of pentests?
What is the goal of this alternative activity?
Instead of traditional pentests, orgs can conduct specific exercises called wargames where security professionals are put on teams in a simulated environment to compete against one another.
The goal of this alternative activity is skill growth for both teams by allowing them to use the tools and methods that attackers would use.
In wargames, who is the red team? What do they do? What cybersecurity function are they acting in?
In wargames, the red team is the attacking team.
They recon and try to exploit the system to access it.
They act like pentesters in a traditional penetration test
In wargames, who is the blue team? What do they do? What cybersecurity function are they acting in?
In wargames, the blue team is the defensive team, trying to stop the attackers.
What they do is they construct, maintain, and keep an eye on security controls that encompass a large variety of items
In wargames, who is the white team? What do they do? What cybersecurity function are they acting in?
In wargames, the white team serves as the judges/referees of the operation.
They can settle arguments between the teams and make sure that the systems being used are working well, including the technical environment.
Lastly, they keep track of the results.
What are wargames useful for?
Wargames are useful for educating security pros on current tactics used by attackers and defenders
