• Real-world attack scenarios: Realistic attack scenarios using TTPs seen across global attacks to identify vulnerabilities.
• Risk analysis: Fact-based risk analysis that details the relevance of each vulnerability within your environment, along with techniques to validate them.
• Custom objectives: Tailored engagements to meet organizational needs, with goals based on relevant risks to your specific organization (such as obtain access to PCI data, PII, trade secrets).
• Industry focus: Consultants experienced with critical infrastructure sectors including: energy, healthcare, manufacturing, and telecommunications.
• Technical report: A concise report that describes the steps taken, naming the vulnerabilities found, and actionable remediation recommendations.
• Executive report: A high-level summary of the assessment itself, catering to executives and senior-level leadership, with strategic recommendations for long-term improvement.

With a systematic, repeatable, and reproducible methodology, we first establish the following:

• Determine whether to start efforts with information about the environment or without.
• Discuss the type of threat intelligence Mandiant possesses about high-risk assets and vulnerabilities in your industry.
• Clarify objectives for the red teamers to accomplish when simulating the real-world attack.

Once the above requirements are confirmed, in collaboration with your organization's leadership team, Mandiant conducts an initial reconnaissance through a combination of proprietary intelligence repositories and open-source intelligence (OSINT) tools and techniques.

Mandiant then works to exploit organizational vulnerabilities, for example through a social engineering attack, with the goal to gain access to your privileged systems.

Once access is gained, the red teamers attempt to escalate privileges and maintain persistence within your environment by deploying a command and control infrastructure, like an attacker would.

Finally, with command and control systems established, the red teamers work to accomplish their engagement objectives through any and all non-disruptive means necessary.