Critical infrastructure penetration testing / adversary simulation
Open brief146 · Critical infrastructure penetration testing / adversary simulation
Red Quarry is a fictional authorised security-testing team for utilities, transport and industrial organisations. Exercises are bounded by explicit objectives, safety constraints, stop conditions and evidence handling before any adversary technique is attempted.
About / field note
Red Quarry is a fictional authorised security-testing team for utilities, transport and industrial organisations. Exercises are bounded by explicit objectives, safety constraints, stop conditions and evidence handling before any adversary technique is attempted.
Evidence
100%
exercises under written authorisation
0
safety interlocks targeted
1 h
maximum fictional critical finding notification
14 days
default remediation retest window
Offerings
1
Purple-team exercises is scoped through the exercise objective, with authorisation, target boundary, technique, observed control, safety stop and remediation evidence. The boundary, exclusions and handover evidence are stated before work begins.
2
External attack simulation is scoped through the exercise objective, with authorisation, target boundary, technique, observed control, safety stop and remediation evidence. Capacity, constraints and decision ownership stay visible from intake to closeout.
3
Identity control testing is scoped through the exercise objective, with authorisation, target boundary, technique, observed control, safety stop and remediation evidence. The boundary, exclusions and handover evidence are stated before work begins.
4
Tabletop-to-technical drills is scoped through the exercise objective, with authorisation, target boundary, technique, observed control, safety stop and remediation evidence. Capacity, constraints and decision ownership stay visible from intake to closeout.
Work / dispatches
A simulated contractor credential compromise tested MFA, privileged access and SOC escalation without touching live process controls.
Internet-facing assets were validated against inventory, exposing two unmanaged systems before controlled exploitation was necessary.
Defenders and testers replayed one approved lateral-movement path while monitoring every alert and block point together.
Process
Authorise the boundary is the entry control point for a exercise objective. The team records authorisation, target boundary, technique, observed control, safety stop and remediation evidence so the next decision is made from an explicit state, not memory or assumption.
Define stop conditions is the next control point for a exercise objective. The team records authorisation, target boundary, technique, observed control, safety stop and remediation evidence so the next decision is made from an explicit state, not memory or assumption.
Exercise one objective at a time is the next control point for a exercise objective. The team records authorisation, target boundary, technique, observed control, safety stop and remediation evidence so the next decision is made from an explicit state, not memory or assumption.
Debrief controls, not theatrics is the next control point for a exercise objective. The team records authorisation, target boundary, technique, observed control, safety stop and remediation evidence so the next decision is made from an explicit state, not memory or assumption.
Reading room
A penetration test without asset inventory teaches the wrong lesson. A working note from Red Quarry on the decisions hidden inside critical infrastructure penetration testing / adversary simulation. It connects the claim back to exercise objective and names where professional judgement or uncertainty remains.
Stop conditions are part of good offensive security. A working note from Red Quarry on the decisions hidden inside critical infrastructure penetration testing / adversary simulation. It connects the claim back to authorisation, target boundary, technique, observed control, safety stop and remediation evidence and names where professional judgement or uncertainty remains.
Purple teams should measure controls, not ego. A working note from Red Quarry on the decisions hidden inside critical infrastructure penetration testing / adversary simulation. It connects the claim back to authorisation, target boundary, technique, observed control, safety stop and remediation evidence and names where professional judgement or uncertainty remains.
People
Exercise director
Nora Mensah leads exercise director and owns the decisions that touch each exercise objective. The role is described by responsibility, not decorative biography.
Adversary emulation
Jaco Mthembu leads adversary emulation and owns the decisions that touch each exercise objective. The role is described by responsibility, not decorative biography.
Defensive validation
Priya Shah leads defensive validation and owns the decisions that touch each exercise objective. The role is described by responsibility, not decorative biography.
Objections / answers
Conversion / next step