Initial Briefing: As part of a select group, I was briefed on the boundaries of the test to ensure all activities were ethical and within the defined scope.

Team Coordination: Our team was split into four key sub-teams: The Networking, Individual, Physical, and Corporate teams. I facilitated coordination between individual (digital research) and physical teams, ensuring synchronized efforts for a more realistic and effective simulation. Being in this position also provided me the chance to better leverage my research into on-site social engineering.

On-site Breach: Our physical team attempted to breach the client’s premises using a variety of tools and techniques such as tailgating, badge cloning, social engineering, and several more physical intrusion tools based on our client’s unique environment. 

Digital Intrusion: Simultaneously, our network team worked on network discovery, mapping vulnerabilities in the client’s digital infrastructure, and contributing vital information with a variety tools, persistence, and thorough reconnaissance. The corporate team ensured we were adhering as close as possible to our outlined agreements with the client.

Data Acquisition: Once our team had gathered enough necessary information about employees, the network environment, and the on-site and surrounding buildings, we were able to launch a large scale breach that levered the focused efforts of every team. We managed to successfully breach the client’s premises at night and our teams aimed to acquire as much data as possible, simulating a real-world unauthorized intrusion, and documenting any further discovered vulnerabilities.

Feedback Collection: Post-operation, I coordinated with each of the teams to compile our vast amount of findings, ensuring no detail was overlooked. Our security assessment was nearly 100 pages long. We prepared and delivered a presentation to our clients explaining our findings with great detail.