TLDR InfoSec · STRATEGIES & TACTICS

HOW GITLAB'S RED TEAM AUTOMATES C2 TESTING

about.gitlab.com10 min read

Summary from the TLDR InfoSec newsletter

In this blog post, Gitlab talks about how their red team conducts security exercises that simulate real-world threats to assess and improve the effectiveness of the organization's security measures. The team uses open-source command and control (C2) tools, such as the Mythic framework, to customize and combine different open-source options to evade detection.