A red team cyber security assessment will employ a variety of techniques, starting with external reconnaissance. This phase includes the enumeration of all IPs and domain names belonging to the target organisation. Search engines and social media websites will be trawled for publicly accessible information. Once an attack surface has been identified, assessors will search for vulnerabilities in the infrastructure where public and, if applicable, bespoke Day One exploits will be used. Red Team members will attempt to gain an initial foothold. Vulnerable external web applications are exploited, social engineering is conducted, and varying payload delivery methods occur. If within the scope of the Red Team engagement, a physical breach of premises is conducted to gain an enhanced physical foothold which provides other opportunities for cyber-attack. Once a foothold is gained, lateral movement and privilege escalation techniques are employed. After the assessment is concluded, a detailed report with all supporting data demonstrating the attack with recommendations is supplied to you.