logo
Red wilds
The collection landscape
  • Privacy greenhouse
  • Defence blues
  • Purple crossroads
  • Indigo observatory
  • Contact
Initializing search
    • Unseen University Power & Light Co.
    • The Scarlet Semaphore
    • Myrddin’s menagerie
    • In: Where the falcons and foxes roam
    • Through: Where the raccoons burrow and rummage
    • Out: Where squirrels swipe the crown jewels
      • Knowing what to take
        • The collection landscape
          • Trends
          • What this means for red teams
          • The uncomfortable bottom line
          • Identity-first collection
          • Supply chain as a collection vector
          • Collection techniques
        • The collection landscape
          • Trends
          • What this means for red teams
          • The uncomfortable bottom line
          • Identity-first collection
          • Supply chain as a collection vector
          • Collection techniques
        • Finding and pulling the data
        • From access to staged data
      • Getting it out
      • Making it count
      • The squirrel escape

    The collection landscape¶

    Collection used to mean “find the file share, copy the files”. Now it means understanding which identity controls which data, and then becoming that identity. The perimeter is gone; what remains is identity, and identity is what attackers target first.

    Several shifts are worth naming explicitly:

    • Trends
    • What this means for red teams
    • The uncomfortable bottom line
    • Identity-first collection
    • Supply chain as a collection vector
    • Collection techniques
    2026-03-25 22:33
    © Copyright 2025, TyMyrddin.
    Created using Sphinx 7.2.6. and Sphinx-Immaterial

    Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7