Sight
Give Saluki a name. It maps everything that name exposes: domains, cloud, certificates, services, identities. The map stays current as the estate changes.
Automated red team operations against your real estate. Pursuit sets objectives, chains the steps a capable adversary would, stays inside the rules you set and documents every one.
| Operation | Status |
|---|---|
| NightfallOP-204Red team | Running |
| Harbour driftOP-205Emulation campaign | Scheduled |
| Clear skiesOP-198Retest batch | Complete |
Reach the admin console. Read another tenant's data. Cross from a supplier into the corporate estate. Pursuit takes objectives like these and works towards them the way a capable adversary would, chaining identity, cloud, web and, where in scope, people. Every operation runs inside your rules of engagement, and every step is recorded with its evidence.
GET /admin HTTP/2Host: vpn-02.brackwell.exampleAuthorization: Bearer ••••••••Pursuit chains the small steps a skilled operator would: sign in, map, compare, cross a boundary, reproduce. Mapped to MITRE ATT&CK.
Mapped vpn-02 and enumerated the paths reachable from the public internet.
Authenticated as a standard VPN user with issued test credentials.
Compared the admin and user responses; the console rendered for both roles.
Reached /admin without an administrator role and read tenant configuration.
Reproduced the path three times from a clean session. No data changed.
Scope, windows, pace and non-destructive testing are enforced by the platform on every action, and every action is logged.
Every finding carries the path, the request and the response, reproduced before it reaches you. A Saluki operator checks every critical finding first.
GET /admin HTTP/2Host: vpn-02.brackwell.exampleAuthorization: Bearer ••••••••Cookie: session=••••••••User-Agent: saluki-pursuit/4.2HTTP/2 200Content-Type: text/html; charset=utf-8X-Brackwell-Role: user <title>Administration · Brackwell</title>3 domains, 2 ranges22:00-06:00 UTCNon-destructive
Pursuit runs the Emulate step and hands verified findings with evidence to Resolve.
In the loop
Pursuit
Autonomous adversary emulation