Guerrilla Red Team: Decentralizing Adversary Simulation Across the Enterprise
Chris Cottrell introduces the Guerrilla Red Team methodology, empowering distributed engineering teams to act as trusted internal ethical hackers.
Summary
The Bottleneck of Centralized Security Teams
Traditional enterprise security teams struggle to scale across massive software engineering fleets, resulting in delayed code reviews and missed vulnerability assessments.
Introducing the Guerrilla Red Team Methodology
Chris Cottrell proposes creating an internal mesh network of decentralized ethical hackers embedded directly within product engineering squads.
Upskilling Developers with Adversarial Mindsets
Cottrell details training programs, micro-challenges, and capture-the-flag exercises that transform software developers into proactive internal security champions.
Scaling Security IQ and Continuous Adversary Emulation
The author shares organizational blueprints for managing decentralized red teaming, measuring security ROI, and fostering a resilient security culture.
Related talks
Red Team Village·57 min
Adam Pennington
MITRE ATT&CK lead Adam Pennington shares strategies for crafting realistic adversary emulation plans even when threat intelligence reports are incomplete or vague.
Red Team Village·46 min
Pablo González
Pablo González presents ATTPwn, an open-source adversary emulation framework designed to automate MITRE ATT&CK techniques and validate defensive controls.
Red Team Village·45 min
Ch33r10
Ch33r10 explains how to transform cyber threat intelligence (CTI) from static indicators of compromise into dynamic 'Indicators of Emulation' for red teams.