Select tooling around an authorised red-team objective
Fortra’s published Red Team Suite brings together Cobalt Strike and Outflank Security Tooling. It is an adversary-simulation selection rather than a general vulnerability-scanning package. Begin with the defensive questions the organisation intends to rehearse, the operators who will conduct the exercise and the approved assessment boundary.
Confirm the current suite contents and any training or research-resource entitlements in the proposal. Product capabilities change, so avoid assuming that every feature mentioned in a historic presentation is included in the offered version. Operator readiness and safe exercise governance need separate attention from licensing.
Build the review and cleanup into the exercise
A controlled evaluation should define what observations the defending team will review and how the exercise remains distinguishable from an unplanned incident when emergency coordination is needed. The purpose is evidence about selected defensive processes, not a promise that a successful demonstration represents every possible adversary.
Assessment work requires written authorisation, communications, stop conditions and evidence handling. Handover should retain the agreed exercise record, cleanup confirmation and improvement actions. MMC can scope suite selection and related delivery arrangements; a purchase does not imply an unrestricted red-team service, third-party testing permission or unverified specialist credentials.
Evidence to request for this scope
- Confirm current Cobalt Strike, OST and any additional resource or training entitlements in writing.
- Define authorised exercise objectives, emergency coordination and evidence access before activity.
- Include cleanup, defender review and accountable improvement actions in the service scope.