RED TEAM OPS // PHASE 01
Reconnaissance
Passive and active discovery of the isolated /24. Map hosts, ports, and services without triggering alerts.
Objectives
- 01Enumerate live hosts on 10.10.10.0/24.
- 02Fingerprint OS and services on each responder.
- 03Identify domain-joined targets vs standalone.
ATT&CK techniques
T1595T1590T1046
Operator Checklist
operator@linux01 ~ /ops/recon
$ sudo arp-scan --interface=eth1 10.10.10.0/24
10.10.10.2 00:15:5d:aa:01:02 DC01
10.10.10.3 00:15:5d:aa:01:03 FS01
10.10.10.105 00:15:5d:aa:01:69 WIN01
3 packets received by filter, 0 packets dropped
$