↓Skip to main content

Unlocking the Potential of Offensive Security: from Red Teaming to TIBER-EU

Thales Cybersecurity Services webinar, online, April 25, 2024 (French session 10:00 CEST, English session 14:00 CEST), with Marc Lefebvre

This webinar looked at how red teaming has evolved by incorporating threat-intelligence-driven methodologies, and how this gives organisations more advanced cyber defence capabilities. It was delivered twice on the same day:

  • French session, 10:00 CEST, “Du Red Teaming aux Pen Tests enrichis par la Cyber Threat Intelligence & TIBER-EU : en savoir plus sur la sécurité offensive”
  • English session, 14:00 CEST, “From Red Teaming to Threat Intelligence Penetration Testing and TIBER-EU: Unlocking the Potential of Offensive Security”

I co-presented both sessions with Marc Lefebvre, Offensive Security Team Leader at Thales. The talk covered:

  • Red teaming and cyber threat intelligence: pentest, purple team and red team engagements, and how threat intelligence turns into the scenarios the red team then plays
  • TIBER-EU: what the framework is, who it applies to, the accreditation expected from red team providers, and the phases and reporting it prescribes
  • Red team scenarios: the kill chain from reconnaissance to actions on objectives, the timeline of an engagement, and three anonymised scenarios from real engagements: a ransomware-style phishing campaign, a supply chain attack and initial access through an access broker
  • The Thales offensive security, CTI and CERT teams behind these engagements

At the time I was leading the Intrusion & Application Security team and serving as Red Team Leader on TIBER engagements: a few months earlier, I had presented the results of our first TIBER-LU exercise as Red Team provider during its final replay workshop. I had also covered the topic on stage at Cyber Meet-Up 2023.

The registration pages for both sessions were hosted on BigMarker and are no longer online. The visual at the top of this page is the webinar’s title slide.