Objective outcomes
A clear pass/fail view of agreed business objectives, including whether the SOC detected and contained the operation.
Complete redacted sample
Red team sample report
A complete customer-safe illustrative report showing how LunarChain Security documents business objectives, attack paths and detection-and-response outcomes.
Findings snapshot
Critical business risk
The sample operation achieves its objectives through identity, segmentation and response-control gaps, with nine findings mapped to a controlled attack timeline.
4 critical4 high1 medium
Key findings
- Sensitive data exposed through over-permissive shares and unmanaged secrets
- Over-privileged service accounts expanding identity blast radius
- Sensitive environment reachable from the corporate trust tier
- Alerts generated but not triaged within useful windows
- Phishing-resistant MFA not enforced for high-risk users
Report structure
Rules of engagement
Control group, exclusions, deconfliction, safe-word process and production-impact constraints.
Kill chain narrative
A chronological attacker story from reconnaissance through initial access, escalation, collection and impact simulation.
Detection evaluation
Prevented, alerted and responded-to status for each material attacker action, ready for purple-team replay.
Root causes
Identity, segmentation, monitoring and process gaps expressed at the level leadership can fund and track.
Strategic recommendations
A small number of high-leverage fixes, focused on reducing blast radius and converting telemetry into response.
Methodology
Evidence built for engineers, auditors and leadership
Each sample is deliberately illustrative and customer-safe. The structure mirrors a live engagement: agreed scope, manual verification, evidence references, remediation guidance and retest-ready status tracking.
Book a callMethods and standards
MITRE ATT&CKObjective-led red team lifecyclePurple-team replayRules of engagement
Relevant services