A Tale of Two SOCs: Insights From Two Red Team Assessments
Brief
Advisory at a Glance Title A Tale of Two SOCs: Insights From Two Red Team Assessments
Original Publication
August 25, 2026
Executive Summary
The Cybersecurity and Infrastructure Security Agency (CISA) conducted simultaneous red team assessments at two organizations and observed different defensive outcomes. In both environments, the red team achieved full domain compromise and accessed sensitive business systems (SBSs) and cloud resources.
Organization A failed to detect or contain the activity, but Organization B rapidly identified initial compromise attempts, isolated affected systems, and forced the red team into an assume breach model.