Situational Awareness

In this life cycle of the red team engagement the operator is gaining as much information about the compromised environment and the domain network, there is no predefined list of commands to execute but the information gathered is essential to what the next actions will be taken towards persistence, lateral movement or privilege escalation.