Hi everyone.
I'm Chris.
And welcome back to my course on Enterprise Security fundamentals.
Now this is going to be a short lesson but I just wanted to include it to emphasize the importance of
documenting vulnerabilities and other steps in a red team versus blue team exercise.
A substantive difference between a properly functioning Red Team and penetration by an attacker of nefarious
intent is that as a part of the penetration process the red team is documenting the vulnerabilities
that they find in the systems that they have been performing the exercise against.
This will allow the organization to remediate those vulnerabilities after the exercise concludes.
So the organization is no longer vulnerable to that specific set of vulnerabilities.
The red team should also ensure that any modifications that they make to the organization's information
systems during the exercise can either be rolled back or remediated by implementing a better security
configuration.
Overall success in the exercise will mean that the red team will have to institute completely different
steps in their kill chain when the next red team versus Blue Team exercise occurs because the issues
raised by the previous exercise will have all been addressed.
Now please remember this.
Main objectives of the documentation of vulnerabilities.
So when you are performing a red team versus Blue Team exercise the red team should document all vulnerabilities
so they can be addressed after the exercise completes.
And as I said in the next exercise those vulnerabilities are addressed and the red team will have to
take a different approach.
Document any findings within the configuration of the server's systems network devices you are targeting
with the exercise.
The most important document any modifications made during the exercises.
For example if you modify the configuration of a server you need to document that so you can roll it
back or address that configuration issue.
If there is a configuration issue and again document all steps taken in the exercise From the moment
you do the reconnaissance until the red team reaches or doesn't reach is its end goal document all the
steps.
I will see you guys in the next lesson where we'll discuss about the opposite of the red team that is
the blue team.
I hope this has been informative for you.
Thank you for watching.