Case Studies

What We Found. What It Meant.

A selection of anonymized engagement outcomes demonstrating the impact of real-world adversary simulation across sectors. All clients are anonymized per engagement confidentiality agreements.

Featured Engagements
FINANCIAL SECTOR

Full-Scope Red Team: Tier-1 Bank

Achieved domain compromise in 11 days via an unpatched VPN appliance, lateral movement through Active Directory, and exfiltration of synthetic financial records — all undetected by the SOC.

11
Days to Domain Admin
47
Techniques Used
2
SOC Alerts Triggered
CRITICAL INFRASTRUCTURE

OT/ICS Adversary Simulation

Demonstrated a full kill chain from enterprise network to OT environment — crossing the air-gap via a compromised engineering workstation and accessing SCADA historian data.

34
Systems Accessed
Yes
Air-Gap Crossed
8%
Detection Rate
CLOUD / SAAS

Cloud Privilege Escalation Campaign

Identified a chain of three IAM misconfigurations in a AWS environment that allowed privilege escalation from a developer role to full organization-level administrative access.

3
Misconfigs Chained
1,200+
Accounts Compromised
4h
Time to Root Access
Additional Engagements
HEALTHCARE

Ransomware Simulation: Regional Hospital Network

Simulated a Conti-affiliated ransomware operator's deployment chain from phishing email to encrypted workstations. Exposed 4 detection gaps in the SOC playbook.

Phish
Initial Access Vector
31h
Time to Ransomware
4
Detection Gaps Found
TELECOM

SS7 & Core Network Assessment

Conducted a technical assessment of SS7 signaling attack surface, identifying multiple authentication bypass conditions in legacy network components.

3
CVEs Identified
2
Auth Bypasses
Core Network
Scope
RETAIL / E-COMMERCE

POS Compromise Simulation

Demonstrated end-to-end compromise of PCI DSS in-scope cardholder data environment from an externally accessible web application vulnerability.

Web App
Attack Vector
Breached
PCI Scope
Yes
CVE Published