4 ms·
It seems like you think that red teaming and blue teaming works much like an RPG game where you can spend skill points on perks, but blue team perks (like tier
by LogonType10 5y ago
It seems like you think that red teaming and blue teaming works much like an RPG game where you can spend skill points on perks, but blue team perks (like tier 1 endpoint defense) cost more skill points than red team perks. I don't think this is an accurate mental model, and I'd rather frame it like this: exploits are secrets, and when you learn the secret, you can share it with others as well as develop the countermeasure to the exploit. If you spend a lot of money discovering a useful exploit it is by definition something nontrivial that is unlikely to be discovered by regular hackers unless it is leaked or discovered after careless usage. If you discover an exploit that an enemy will soon discover, it is to your advantage to publish the countermeasures to the exploit before your opponent discovers and weaponizes it.