Pentesting VS Red Teaming

Yeah, so I would consider pen test or penetration testing as a point-in-time evaluation of an organization's technical security posture, and you can test at multiple different layers and from multiple different perspectives. So you can test white box, which is you have full knowledge of the environment and you know what you're getting into and you're able to conduct a very thorough test because you know what's there. You can do a black box test, which would be blind like a true adversary coming in and you just start with open source intelligence and reconnaissance and you basically know nothing but what you are able to glean from the actual testing. Or you could do some, somewhere in the middle, kind of a gray box. You know some things, you don't know other things, and that's going to be driven a lot by really how you scope the test at that point. And then you can do it at different asset classes too. You can do network testing, application testing, cloud testing, that sort of thing. Red teaming, I would consider as something much more objectives-driven. So with the red team, you're given a target. It may be domain admin, or it may be the CEO's personal bank account number, or it may be the molecule database at the pharma company. Right. And you're given a set of tactics that are allowed and then broad remit within those tactics to try to achieve that objective. Typically that's done on a regular basis, so quarterly, monthly, annually, some cadence comes along with the red team so that you have the added advantage of, adversaries have time. If I'm coming after an organization, I can take 6 months to do my reconnaissance and figure out patterns and learn the org structure. Red team, you wanna give them that same ability. So that they can understand the organization and try to come at you like a real attacker would.