
US Red Teams Show Poor Performance Compared to British Counterparts According to Financial Institution SOC Manager
red_teamcybersecuritypenetration_testingsocial_engineeringsecurity_consultingfinancial_sectorSOCthreat_detectionassumed_breachcustom_tools
A SOC manager from a major American financial institution reports their experience with Red Team engagements over 5 years. Well-known American consultant teams systematically failed with outdated techniques, quickly switching to "assumed breach" scenarios and requesting exceptions for their implants, while a recent British team demonstrated a significantly higher level of quality with sophisticated social engineering, custom tools and stealthy techniques that bypassed detections. The author expresses frustration with the apparently overrated reputation of American Red Teams compared to the observed quality of the British team.