Contact us: info@tenendo.com

Red Teaming

Explore real-world Red Teaming engagements where we simulate advanced cyber threats to test an organization’s defenses, detection capabilities, and response readiness. Our case studies highlight critical security gaps, attack techniques, and actionable remediation strategies to enhance cyber resilience. See how adversaries think, act, and exploit weaknesses—before real attackers do.

Client-Bank application compromise

This case is a very good example why manual penetration tests are valuable - the team achieved compromise without administrator access to the application, not using any known exploits or discovering injection/deserialization/other RCE flaws.

Internal Adversary Simulation case study

Do you want to know how your organisation will fare against an internal attack? Look no further than Tenendo's Internal Adversary Simulation.

Internal Adversary Simulation Case

The adversary simulation activity helped the client identify and remediate multiple issues with the on-premise infrastructure and vulnerabilities, calculate potential risks, and improve the overall security posture. Each finding also included proposed solutions for applying industry-standard defences.

Azure Active Directory compromise

The Azure penetration test helped the client identify and remediate multiple issues and misconfigurations, harden their infrastructure and calculate potential risks.

EDR product’s effectiveness evaluation case

Evaluating EDR Product against Threat Actors: Uncovering Limitations and Collaboration for Enhanced Detection of Multiple Killchains.

Targeted Phishing on Cloud Services Provider Admin infrastructure Case

Successful phishing attacks revealed detection gaps in support and SOC teams, allowing unauthorized access without alerts.

Assumed Breach and Privilege Escalation Case

Weak authentication and poor segmentation enabled privilege escalation from VPN access to full domain control.

Network Compromise and Cloud Infrastructure Exposure Case

Poor network segmentation enabled an attacker to pivot from internal access to full cloud takeover.

Application Threat Modelling and Phishing Attack Chain Case

A threat model helped prioritize vulnerabilities, leading to the identification of a phishing attack chain that bypassed MFA and allowed unauthorized transactions.