Red wilds

Operational procedures for endpoint attacks

Privacy greenhouse
Defence blues
Purple crossroads
Indigo observatory
Contact

Initializing search

Red wilds

Whatever, you watch your step.
Whatever, you watch your step.
In:
In:
- Where the falcons and foxes roam
  Where the falcons and foxes roam
  - A canopy of apple-blossom
  - Social engineering
  - Where wild boars plough through endpoints
  - Wolverines do not ask for permissions
  - Riches in the ground
  - The device is just the keyring
    
    The device is just the keyring
    
    Field notes from the identity layer
    
    Operational procedures for endpoint attacks
    
    Operational procedures for endpoint attacks
    
    Runbook: Endpoint initial access
    
    Runbook: EDR bypass
    
    Runbook: Credential and token harvesting
    
    Runbook: Pivot from endpoint to cloud
    
    Operational procedures for endpoint attacks Operational procedures for endpoint attacks
    Table of contents
    
    Runbook: Endpoint initial access
    
    Runbook: EDR bypass
    
    Runbook: Credential and token harvesting
    
    Runbook: Pivot from endpoint to cloud
    
    Attack chain playbooks for endpoint operations
    
    Controls and detection for endpoint attacks
  - Poking physics with network packets
Through:
Through:
- Where the raccoons burrow and rummage
Out:
Out:
- Where squirrels swipe the crown jewels

Operational procedures for endpoint attacks¶

Runbooks:

Runbook: Endpoint initial access
Runbook: EDR bypass
Runbook: Credential and token harvesting
Runbook: Pivot from endpoint to cloud

2026-03-25 00:01

© Copyright 2025, TyMyrddin.

Created using Sphinx 7.2.6. and Sphinx-Immaterial

Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7