03Capability
Adversary Emulation
Assessment focus
The question comes first.
A useful scenario starts with a relevant threat model. The objective is to examine specific assumptions through observable, controlled behavior.
Threat context
Relevant adversary behaviors and the evidence behind their selection.
Scenario design
The sequences to examine, with clear limits and expected observations.
Defensive learning
The detection, response and visibility questions the exercise should answer.
Initial briefing