Kyle says he is on the Red Team at McKesson.
Explicit Confidence 99% · Kyle EP 40 Details
“Right now, I’m on the Red Team at McKesson.”
Person
person:kyle
Red-team operator who describes conducting physical and network penetration tests.
Red-team operator who describes conducting physical and network penetration tests.
“My name is Kyle. Right now, I’m on the Red Team at McKesson.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | MEMBER_OF | McKesson | Explicit | 40 |
| outgoing | USES | Red Team | Explicit | 40 |
| outgoing | USES | physical penetration testing | Explicit | 40 |
| outgoing | USES | passive reconnaissance | Explicit | 40 |
| outgoing | USES | social engineering | Explicit | 40 |
| outgoing | USES | network dropbox | Explicit | 40 |
| outgoing | USES | firewall bypass | Explicit | 40 |
| outgoing | USES | lock picking | Explicit | 40 |
| outgoing | USES | badge cloning | Explicit | 40 |
| outgoing | USES | Proxmark | Explicit | 40 |
| outgoing | USES | drop ceiling bypass | Explicit | 40 |
Kyle says he is on the Red Team at McKesson.
Explicit Confidence 99% · Kyle EP 40 Details
“Right now, I’m on the Red Team at McKesson.”
Kyle works as part of a Red Team conducting simulated offensive security tests.
Explicit Confidence 96% · Kyle EP 40 Details
“I’m on the Red Team at McKesson.”
Kyle USES physical penetration testing
Kyle and his coworkers perform physical penetration tests by breaking into buildings to test security.
Explicit Confidence 98% · Kyle EP 40 Details
“The point was to gain access to headquarters by way of anything we could do at any of the previous sites”
Kyle USES passive reconnaissance
Kyle and his team use social media, Google Maps, and related public information to profile target locations and employees.
Explicit Confidence 99% · Kyle EP 40 Details
“I get on my browser and I just go to Facebook; I go to LinkedIn; I go to Twitter.”
“You also look at what Google Maps has to offer.”
Kyle USES social engineering
Kyle and his team use disguises, cover stories, employee branding, and fabricated explanations to appear authorized.
Explicit Confidence 98% · Kyle EP 40 Details
“Typically, you want to dress for the part”
“we’re here dealing with some incident response stuff. We’re with information security.”
Kyle USES network dropbox
Kyle repeatedly deploys a portable network dropbox inside target facilities to provide remote access to the internal network.
Explicit Confidence 99% · Jack Rhysider EP 40 Details
“Kyle takes his backpack off and pulls out a dropbox.”
“We get the dropbox plugged in in between the copier and the wall.”
Kyle USES firewall bypass
Kyle says the team bypassed the firewall while deploying the dropbox.
Explicit Confidence 99% · Kyle EP 40 Details
“We bypassed the firewall.”
Kyle USES lock picking
Kyle and his colleague use lock-picking tools to open a locked office door.
Explicit Confidence 99% · Jack Rhysider EP 40 Details
“We pull out some lock picks and begin trying to pick the lock.”
“We clone it with a Proxmark right on the spot and then we leave.”
Kyle USES badge cloning
Kyle clones a headquarters badge to obtain access to the target building.
Explicit Confidence 99% · Kyle EP 40 Details
“We clone it with a Proxmark right on the spot”
“I had taken their badge design, put my photo on it, and printed it on this cloned badge.”
Kyle uses a Proxmark to clone an RFID badge.
Explicit Confidence 99% · Kyle EP 40 Details
“We clone it with a Proxmark right on the spot”
Kyle USES drop ceiling bypass
Kyle's colleague enters the server room through the drop ceiling rather than using its door.
Explicit Confidence 99% · Kyle EP 40 Details
“Then he slid the other tile out of the way, dropped down on the other side”