Projects

Operations Manual

The Thinking Offensively Operations Manual is a practitioner-focused offensive security reference that documents how attacks are planned, executed, and evaluated, with an emphasis on decision-making, tradeoffs, and objectives.

Content is written from the attacker's point of view and grounded in real-world offensive operations. Techniques are presented to illustrate why certain decisions are made, followed by how those decisions are commonly executed. Specific commands, tools, and techniques are included where they add value, but they are always secondary to developing the attacker's mindset.

Read
Thinking Offensively Operations Manual - Practitioner-focused offensive security reference guide

Red Team Campaign Planner (RTCP)

RTCP simplifies querying MITRE ATT&CK Enterprise data to quickly provide red teams with known threat group techniques that can immediately be integrated into adversary emulation plans.

Two Ways to Use RTCP:

1) Use Industry Analysis to perform keyword analysis on MITRE ATT&CK Enterprise data to identify the top threats to a specific industry and region (optional), and subsequently view known techniques for the selected group(s).

2) Use Threat Browser to navigate directly to a specific threat group to view known techniques.

Launch RTCP View Demo
Red Team Campaign Planner Industry Analysis Interface showing MITRE ATT&CK threat group selection Red Team Campaign Planner interface displaying threat group techniques for adversary emulation planning

About

Thinking Offensively explores cybersecurity from the attacker's perspective. I examine offensive security strategy topics to help cybersecurity leaders anticipate threats and inform decision making, while also providing tools, playbooks, and techniques that red teams can apply directly to their work. My mission is to bridge strategy and execution to help organizations think offensively and stay ahead of evolving threats.

Social Media