<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: conducting-red-team-social-engineering
description: >-
  Plan and execute comprehensive red team SE operations combining multiple attack vectors for adversary simulation.
domain: cybersecurity
subdomain: social-engineering
tags:
  - red-team
  - social-engineering
  - adversary-simulation
  - multi-vector
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: ["T1598"]
---

# Conducting Red Team Social Engineering

## Overview

Plan and execute comprehensive red team SE operations combining multiple attack vectors for adversary simulation.

## Prerequisites

| Requirement | Install |
|---|---|
| Red team infra | C2, phishing, vishing |
| ROE | Signed rules of engagement |
| Python 3.10+ | For agent tooling |

## Key Concepts

Red team SE operations combine phishing, vishing, pretexting, and
physical vectors into coordinated campaigns following adversary TTPs
with realistic objectives and constraints.

## Quick Reference

```bash
node agent.js plan --operation RTSE-2026-Q1 --vectors phish,vish,physical
node agent.js execute --operation RTSE-2026-Q1 --phase recon
node agent.js log --operation RTSE-2026-Q1 --action credential-harvest
node agent.js report --operation RTSE-2026-Q1
```

## Workflow

1. Develop operation plan
2. Map attack surface
3. Coordinate multi-vector timeline
4. Execute in parallel
5. Attempt physical access
6. Document for deconfliction
7. Produce comprehensive report

## Verification

- Verify ROE coverage
- Confirm deconfliction logging
- Validate coordination
- Check attack narrative
- Verify defensive mappings

## References

- OWASP Testing Guide — https://owasp.org/www-project-web-security-testing-guide/
- MITRE ATT&CK — https://attack.mitre.org/
- NIST SP 800-53 — https://csf.tools/reference/nist-sp-800-53/
