{"id":4423,"date":"2025-06-01T14:18:31","date_gmt":"2025-06-01T12:18:31","guid":{"rendered":"https:\/\/sys.buges.sk\/red-teaming\/"},"modified":"2026-08-29T17:59:52","modified_gmt":"2026-08-29T15:59:52","slug":"red-teaming","status":"publish","type":"page","link":"https:\/\/sysnetshield.com\/sk\/red-teaming\/","title":{"rendered":"Red Teaming"},"content":{"rendered":"\n
\n
\n
\n

Red Teaming<\/strong><\/h1>\n\n\n\n

Penetra\u010dn\u00fd test prever\u00ed syst\u00e9my. Red teaming prever\u00ed cel\u00fa organiz\u00e1ciu \u2013 technol\u00f3gie, procesy aj \u013eud\u00ed. Postupujeme presne ako skuto\u010dn\u00fd \u00fato\u010dn\u00edk s konkr\u00e9tnym cie\u013eom: prenikn\u00fa\u0165 dovn\u00fatra, z\u00edska\u0165 pr\u00edstup k citliv\u00fdm akt\u00edvam a zosta\u0165 \u010do najdlh\u0161ie neodhalen\u00ed. <\/p>\n\n\n\nM\u00e1m z\u00e1ujem o red teaming<\/a>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

\u010co je Red Teaming?<\/h2>\n\n\n\n

Red teaming je najkomplexnej\u0161\u00ed sp\u00f4sob testovania kybernetickej bezpe\u010dnosti organiz\u00e1cie. Na rozdiel od klasick\u00e9ho penetra\u010dn\u00e9ho testu<\/a>, ktor\u00fd sa zameriava na vopred vymedzen\u00fd rozsah, red teaming nem\u00e1 pevne stanoven\u00e9 hranice. M\u00e1 cie\u013e \u2013 takzvan\u00fd flag, teda kritick\u00e9 akt\u00edvum organiz\u00e1cie: pr\u00edstup k z\u00e1kazn\u00edckej datab\u00e1ze, dom\u00e9nov\u00fd radi\u010d alebo chr\u00e1nen\u00e9 intern\u00e9 syst\u00e9my. <\/p>\n\n\n\n

N\u00e1\u0161 t\u00edm pracuje rovnako ako sofistikovan\u00fd \u00fato\u010dn\u00edk skupiny APT (Advanced Persistent Threat). Vyu\u017e\u00edvame kombin\u00e1ciu techn\u00edk: <\/p>\n\n\n\n

\n\n\n
\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

Technick\u00e9 exploity<\/strong> \u2013 zranite\u013enosti v infra\u0161trukt\u00fare, sie\u0165ach a aplik\u00e1ci\u00e1ch<\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Soci\u00e1lne in\u017einierstvo<\/strong> \u2013 phishing, vishing a manipul\u00e1cia zamestnancov<\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

OSINT<\/strong> \u2013 zber verejne dostupn\u00fdch inform\u00e1ci\u00ed o organiz\u00e1cii<\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Fyzick\u00e1 infiltr\u00e1cia<\/strong> \u2013 vstup do priestorov firmy a pr\u00edstup k zariadeniam<\/p>\n<\/div>\n<\/div>\n\n\n\n

Cie\u013eom nie je len n\u00e1js\u0165 technick\u00e9 zranite\u013enosti. Red teaming odhal\u00ed, ako va\u0161a organiz\u00e1cia reaguje na re\u00e1lny \u00fatok \u2013 \u010di bezpe\u010dnostn\u00fd t\u00edm zaregistruje hrozbu, ako r\u00fdchlo zareaguje a kde s\u00fa slabiny v procesoch aj \u013eudskom faktore. <\/p>\n<\/div>\n<\/section>\n\n

\n
\n
\n
\n

Kedy potrebujete Red Teaming?<\/h2>\n\n\n\n

Red teaming nie je pre ka\u017ed\u00e9ho \u2013 a to je v poriadku. Je ur\u010den\u00fd pre organiz\u00e1cie, ktor\u00e9 maj\u00fa zaveden\u00e9 z\u00e1kladn\u00e9 bezpe\u010dnostn\u00e9 opatrenia a chc\u00fa vedie\u0165, \u010di skuto\u010dne funguj\u00fa. Zv\u00e1\u017ete ho, ak plat\u00ed niektor\u00fd z t\u00fdchto bodov: <\/p>\n<\/div>\n\n\n

\n\"Bezpe\u010dnostn\u00ed\n<\/div>\n<\/div>\n\n\n
\n
\n<\/rect><\/rect><\/path><\/svg><\/span>\n\n\n\n

Ste po penetra\u010dn\u00fdch testoch<\/h3>\n\n\n\n

Zranite\u013enosti ste opravili a chcete vedie\u0165, \u010di je organiz\u00e1cia skuto\u010dne odoln\u00e1 vo\u010di cielen\u00fdm \u00fatokom.<\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/svg><\/span>\n\n\n\n

Va\u0161a organiz\u00e1cia rastie<\/h3>\n\n\n\n

Prib\u00fadaj\u00fa \u013eudia, syst\u00e9my a dod\u00e1vate\u013esk\u00fd re\u0165azec. S ka\u017edou zmenou rastie aj \u00fato\u010dn\u00e1 plocha. <\/p>\n<\/div>\n\n\n\n

\n<\/rect><\/path><\/svg><\/span>\n\n\n\n

Mus\u00edte plni\u0165 z\u00e1konn\u00e9 povinnosti<\/h3>\n\n\n\n

Z\u00e1kon o kybernetickej bezpe\u010dnosti (\u010d. 264\/2025 Zb.) a vyhl\u00e1\u0161ka \u010d. 409\/2025 Sb. vy\u017eaduj\u00fa od poskytovate\u013eov regulovan\u00fdch slu\u017eieb v re\u017eime vy\u0161\u0161\u00edch povinnost\u00ed najmenej raz ro\u010dne vyhodnotenie \u00fa\u010dinnosti zaveden\u00fdch opatren\u00ed. <\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

M\u00e1te intern\u00fd SOC alebo blue team<\/h3>\n\n\n\n

Chcete preveri\u0165, \u010di va\u0161i analytici skuto\u010dne deteguj\u00fa a zastavuj\u00fa \u00fatok v re\u00e1lnom \u010dase.<\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Vedenie chce hmatate\u013en\u00e9 d\u00f4kazy<\/h3>\n\n\n\n

Nie spr\u00e1vu z checklistu, ale re\u00e1lnu simul\u00e1ciu \u00fatoku s jasn\u00fdm v\u00fdsledkom: pri\u0161li sme, dostali sme sa dovn\u00fatra, takto sa to d\u00e1 opravi\u0165.<\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/svg><\/span>\n\n\n\n

Chyst\u00e1te akviz\u00edciu, f\u00faziu alebo migr\u00e1ciu<\/h3>\n\n\n\n

Red teaming pred z\u00e1sadnou zmenou odhal\u00ed rizik\u00e1, ktor\u00e9 by sa inak prejavili a\u017e neskoro.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

Typy Red Teamingu<\/h2>\n\n\n\n

Pod\u013ea toho, \u010do chcete preveri\u0165, vol\u00edme jeden z troch scen\u00e1rov \u2013 alebo ich kombin\u00e1ciu:<\/p>\n\n\n\n

Virtu\u00e1lny Red Teaming (online)<\/h3>\n\n\n\n

\u00datok veden\u00fd v\u00fdhradne na dia\u013eku cez digit\u00e1lne kan\u00e1ly. Zameriavame sa na sie\u0165ov\u00fa infra\u0161trukt\u00faru, servery, cloudov\u00e9 prostredia, webov\u00e9 a intern\u00e9 aplik\u00e1cie, e-mail a VPN. S\u00fa\u010das\u0165ou je aj spear-phishing a vishing cielen\u00fd na konkr\u00e9tnych zamestnancov. Vhodn\u00e9 pre organiz\u00e1cie s distribuovanou pr\u00e1cou a cloud-first prostred\u00edm. <\/p>\n\n\n\n

Fyzick\u00fd Red Teaming<\/h3>\n\n\n\n

Simulujeme fyzick\u00fd pr\u00edstup \u00fato\u010dn\u00edka do priestorov organiz\u00e1cie. Vyu\u017e\u00edvame techniky ako tailgating (vstup za opr\u00e1vnenou osobou), klonovanie pr\u00edstupov\u00fdch kariet, predstieranie identity, podstr\u010denie infikovan\u00e9ho USB zariadenia a fyzick\u00fd pr\u00edstup k serverovniam, tla\u010diar\u0148am alebo nechr\u00e1nen\u00fdm pracovn\u00fdm staniciam. Odhal\u00ed bezpe\u010dnostn\u00e9 medzery, ktor\u00e9 IT audit nikdy neodhal\u00ed. <\/p>\n\n\n\n

Assumed Breach<\/h3>\n\n\n\n

Scen\u00e1r, v ktorom presko\u010d\u00edme po\u010diato\u010dn\u00fd prienik a za\u010d\u00edname v bode, ke\u010f \u00fato\u010dn\u00edk u\u017e je vo va\u0161ej internej sieti. Simulujeme spr\u00e1vanie \u00fato\u010dn\u00edka po z\u00edskan\u00ed pr\u00edstupu: later\u00e1lny pohyb po sieti, eskal\u00e1ciu opr\u00e1vnen\u00ed, pr\u00edstup k citliv\u00fdm d\u00e1tam, persistenciu a zakr\u00fdvanie st\u00f4p. Ide\u00e1lne pre organiz\u00e1cie, ktor\u00e9 chc\u00fa cielene preveri\u0165 detek\u010dn\u00e9 a reak\u010dn\u00e9 schopnosti bezpe\u010dnostn\u00e9ho t\u00edmu alebo SOC. <\/p>\n<\/div>\n<\/section>\n\n

\n
\n

Ako Red Teaming prebieha?<\/h2>\n\n\n\n

Red teaming je \u0161trukt\u00farovan\u00fd proces, nie improvizovan\u00fd \u00fatok. Ka\u017ed\u00fd projekt prech\u00e1dza t\u00fdmito f\u00e1zami: <\/p>\n\n\n\n

\n
\n
1<\/div>\n\n\n\n

Defin\u00edcia cie\u013eov a pravidiel<\/h3>\n\n\n\n

Spolo\u010dne definujeme cie\u013eov\u00e9 akt\u00edva (flags), pravidl\u00e1 anga\u017eovania (Rules of Engagement), rozsah, \u010dasov\u00fd r\u00e1mec a komunika\u010dn\u00e9 protokoly. Podp\u00ed\u0161eme NDA a zmluvu o rozsahu pr\u00e1c. Bez tohto z\u00e1kladu neza\u010d\u00edname. <\/p>\n<\/div>\n\n\n\n

\n
2<\/div>\n\n\n\n

Prieskum (Reconnaissance)<\/h3>\n\n\n\n

Pas\u00edvny zber inform\u00e1ci\u00ed o organiz\u00e1cii z verejne dostupn\u00fdch zdrojov. Mapujeme e-mailov\u00e9 adresy zamestnancov, pou\u017eit\u00e9 technol\u00f3gie, subdom\u00e9ny, expoz\u00edciu na soci\u00e1lnych sie\u0165ach aj pracovn\u00e9 inzer\u00e1ty, ktor\u00e9 odha\u013euj\u00fa intern\u00e9 technol\u00f3gie. <\/p>\n<\/div>\n\n\n\n

\n
3<\/div>\n\n\n\n

\u00dato\u010dn\u00e1 f\u00e1za<\/h3>\n\n\n\n

Akt\u00edvny \u00fatok s vyu\u017eit\u00edm v\u0161etk\u00fdch dohodnut\u00fdch vektorov: exploit\u00e1cia technick\u00fdch zranite\u013enost\u00ed, phishingov\u00e9 kampane, pokusy o fyzick\u00fd vstup, soci\u00e1lne in\u017einierstvo. Techniky mapujeme pod\u013ea r\u00e1mca MITRE ATT&CK. <\/p>\n<\/div>\n\n\n\n

\n
4<\/div>\n\n\n\n

Later\u00e1lny pohyb a eskal\u00e1cia<\/h3>\n\n\n\n

Po po\u010diato\u010dnom prieniku pokra\u010dujeme hlb\u0161ie do siete: h\u013ead\u00e1me \u010fal\u0161ie syst\u00e9my, zvy\u0161ujeme opr\u00e1vnenia a pohybujeme sa smerom k cie\u013eov\u00fdm akt\u00edvam. Sledujeme, kedy \u2013 a \u010di v\u00f4bec \u2013 n\u00e1s v\u00e1\u0161 bezpe\u010dnostn\u00fd t\u00edm zaregistruje. <\/p>\n<\/div>\n\n\n\n

\n
5<\/div>\n\n\n\n

V\u00fdstup a debriefing<\/h3>\n\n\n\n

Priprav\u00edme podrobn\u00fa spr\u00e1vu a v\u00fdsledky prezentujeme v\u00e1\u0161mu t\u00edmu vr\u00e1tane Blue Team debriefu \u2013 spolo\u010dn\u00e9ho rozboru, kde sa uk\u00e1zali medzery v detekcii a reakcii.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\nDopytova\u0165 red teaming<\/a>\n<\/div>\n<\/div>\n<\/section>\n\n
\n
\n
\n
\n\"\u0160pecialista\n<\/div>\n\n\n
\n

\u010co dostanete ako v\u00fdstup?<\/h2>\n\n\n\n

V\u00fdstup red teamingov\u00e9ho engagementu je v\u00fdrazne bohat\u0161\u00ed ne\u017e be\u017en\u00e1 pentest spr\u00e1va. Dostanete: <\/p>\n\n\n\n

<\/path><\/svg><\/span>Podrobn\u00fa technick\u00fa spr\u00e1vu<\/strong> \u2013 kompletn\u00fd opis ka\u017ed\u00e9ho kroku \u00fatoku, vyu\u017eit\u00fdch techn\u00edk a n\u00e1strojov, vr\u00e1tane d\u00f4kazov<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>Executive summary<\/strong> \u2013 stru\u010dn\u00e9, netechnick\u00e9 zhrnutie pre vedenie firmy a predstavenstvo<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>\u010casov\u00fa os \u00fatoku<\/strong> \u2013 chronologick\u00fd preh\u013ead od prieskumu a\u017e po dosiahnutie cie\u013ea, vr\u00e1tane momentov, ke\u010f bol \u00fatok detegovan\u00fd<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>Mapovanie na MITRE ATT&CK<\/strong> \u2013 ka\u017ed\u00e1 technika zaraden\u00e1 do priemyseln\u00e9ho r\u00e1mca pre \u013eah\u0161\u00ed reporting<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>Prioritizovan\u00e9 odpor\u00fa\u010dania<\/strong> \u2013 konkr\u00e9tne kroky k n\u00e1prave zoraden\u00e9 pod\u013ea kritickosti, \u017eiadne v\u0161eobecn\u00e9 rady<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>Prezent\u00e1ciu a debriefing<\/strong> \u2013 osobn\u00e9 stretnutie s vysvetlen\u00edm v\u00fdsledkov pre technick\u00fd aj mana\u017e\u00e9rsky t\u00edm<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

Pre\u010do SysnetShield?<\/h2>\n\n\n\n

Na trhu je rad firiem, ktor\u00e9 pon\u00fakaj\u00fa bezpe\u010dnostn\u00e9 slu\u017eby. Tu je konkr\u00e9tny rozdiel \u2013 a \u013eudia, ktor\u00ed za n\u00edm stoja: <\/p>\n\n\n\n

\n
\n\"Patrik<\/a>\n\n\n\n

Patrik \u017d\u00e1k<\/a><\/p>\n\n\n\n

Etick\u00fd hacker a Red Teamer so zameran\u00edm na infra\u0161trukt\u00faru<\/p>\n\n\n\nProfil Patrika \u017d\u00e1ka \u2192<\/a>\n<\/div>\n\n\n\n

\n\"Juraj<\/a>\n\n\n\n

Juraj Dani\u0161<\/a><\/p>\n\n\n\n

Etick\u00fd hacker so zameran\u00edm na webov\u00e9 aplik\u00e1cie<\/p>\n\n\n\nProfil Juraja Dani\u0161a \u2192<\/a>\n<\/div>\n<\/div>\n\n\n\n

Certifik\u00e1cia t\u00edmu<\/h3>\n\n\n\n
\"CRTLCRTL<\/span>Certified Red Team Lead<\/span><\/a>\"CRTOCRTO<\/span>Certified Red Team Operator<\/span><\/a>\"CPTSCPTS<\/span>Certified Penetration Testing Specialist<\/span><\/a>\"CNPenCNPen<\/span>Certified Network Pentester<\/span><\/a>\"CCPenX-AWSCCPenX-AWS<\/span>Certified Cloud Pentesting eXpert \u2013 AWS<\/span><\/a>\"C-AI\/MLPenC-AI\/MLPen<\/span>Certified AI\/ML Pentester<\/span><\/a>\"CAPenXCAPenX<\/span>Certified AppSec Pentesting eXpert<\/span><\/a>\"THMTHM WEB1<\/span>Web App Pentester Level 1<\/span><\/a>\"N\u00daKIBN\u00daKIB<\/span>Mana\u017e\u00e9r kybernetickej bezpe\u010dnosti<\/span><\/a><\/div>
\"CRTLCRTL<\/span>Certified Red Team Lead<\/span><\/a>\"CRTOCRTO<\/span>Certified Red Team Operator<\/span><\/a>\"CPTSCPTS<\/span>Certified Penetration Testing Specialist<\/span><\/a>\"CNPenCNPen<\/span>Certified Network Pentester<\/span><\/a>\"CCPenX-AWSCCPenX-AWS<\/span>Certified Cloud Pentesting eXpert \u2013 AWS<\/span><\/a>\"C-AI\/MLPenC-AI\/MLPen<\/span>Certified AI\/ML Pentester<\/span><\/a>\"CAPenXCAPenX<\/span>Certified AppSec Pentesting eXpert<\/span><\/a>\"THMTHM WEB1<\/span>Web App Pentester Level 1<\/span><\/a>\"N\u00daKIBN\u00daKIB<\/span>Mana\u017e\u00e9r kybernetickej bezpe\u010dnosti<\/span><\/a><\/div><\/div><\/div>\n\n\n\n

CRTO<\/strong> aj CPTS<\/strong> s\u00fa plne praktick\u00e9 certifik\u00e1cie \u2013 sk\u00fa\u0161kou je nieko\u013ekod\u0148ov\u00fd \u00fatok v laborat\u00f3rnom prostred\u00ed a spracovanie reportu, nie test s v\u00fdberom odpoved\u00ed.<\/p>\n\n\n\n

\u010co n\u00e1s odli\u0161uje<\/h3>\n\n\n\n
\n
\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

\u0160pecializovan\u00fd t\u00edm, nie subdod\u00e1vatelia<\/h3>\n\n\n\n

Nie sme konzulta\u010dn\u00fd dom, ktor\u00fd pr\u00e1cu prepred\u00e1va. Ka\u017ed\u00fd projekt ved\u00fa priamo \u010dlenovia n\u00e1\u0161ho t\u00edmu s plnou zodpovednos\u0165ou za v\u00fdsledok. <\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/svg><\/span>\n\n\n\n

Manu\u00e1lna pr\u00e1ca, nielen automatizovan\u00e9 n\u00e1stroje<\/h3>\n\n\n\n

Automatick\u00e9 skenery odhalia zn\u00e1me zranite\u013enosti. Logick\u00e9 chyby, business-logic nedostatky a re\u0165azce exploitov odhal\u00ed len sk\u00fasen\u00fd tester, ktor\u00fd mysl\u00ed ako \u00fato\u010dn\u00edk. <\/p>\n<\/div>\n\n\n\n

\n<\/rect><\/rect><\/path><\/svg><\/span>\n\n\n\n

V\u00fdstupy, ktor\u00e9 sa daj\u00fa pou\u017ei\u0165<\/h3>\n\n\n\n

Spr\u00e1va nie je akademick\u00e9 cvi\u010denie. Je p\u00edsan\u00e1 tak, aby v\u00e1\u0161 dev alebo ops t\u00edm mohol hne\u010f za\u010da\u0165 s n\u00e1pravou \u2013 s konkr\u00e9tnymi krokmi a odkazmi na zdroje. <\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Scen\u00e1re na mieru, nie \u0161abl\u00f3ny<\/h3>\n\n\n\n

Ka\u017ed\u00fd projekt staviame pod\u013ea v\u00e1\u0161ho prostredia, va\u0161ich riz\u00edk a va\u0161ich cie\u013eov. Nepou\u017e\u00edvame krabicov\u00e9 metodiky ani generick\u00e9 \u0161abl\u00f3ny. <\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

Diskr\u00e9tnos\u0165 a ml\u010danlivos\u0165<\/h3>\n\n\n\n

Pred ka\u017ed\u00fdm projektom podpisujeme NDA. V\u0161etky inform\u00e1cie aj v\u00fdsledky zost\u00e1vaj\u00fa v\u00fdhradne medzi nami a vami. <\/p>\n<\/div>\n\n\n\n

\n<\/rect><\/path><\/svg><\/span>\n\n\n\n

S\u00falad s medzin\u00e1rodn\u00fdmi \u0161tandardmi<\/h3>\n\n\n\n

Metodol\u00f3gia vych\u00e1dza z OWASP, PTES a NIST a je v s\u00falade s NIS2 aj z\u00e1konom o kybernetickej bezpe\u010dnosti \u2013 teda s t\u00fdm, \u010do uzn\u00e1vaj\u00fa regul\u00e1tori aj aud\u00edtori.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

\u010casto kladen\u00e9 ot\u00e1zky<\/h2>\n\n\n\n
\n
\n