// GLOSSARY

Red Team (Modular Red Team Simulation)

A modular offensive simulation that, along the threat-actor, critical-asset or assumed-breach axis and under controlled execution, proves a validated attack path to the critical target. It has four modules: Threat-Actor Simulation (RT-1), Objective-Based Red Team (RT-2), Assumed Breach Simulation (RT-3) and Human-Layer Initial-Access Package (RT-4A). It is not a scenario version of the Network Security Penetration Test, and this distinction is the heart of the concept: a penetration test finds and lists the vulnerabilities in a system, while a red team proves those vulnerabilities link together into a real business impact. One says 'a lock here is weak', the other says 'through that weak lock, down this corridor, one can reach the vault'. So the red team's question is not 'how many vulnerabilities are there' but 'can an attacker truly reach the critical target, and where does the defense stop them'. MITRE ATT&CK frames the attack-path steps and the detection-gap matrix shows the defense's blindness; the primary evidence object is the attack path, documented with technical traces and a timeline.