advanced-redteam

为长期红队行动设计C2架构、OPSEC与分层基础设施

为长期红队行动设计可持续的 C2 架构与 OPSEC 策略，涵盖跳板、malleable profiles 和分层/隔离基础设施的思路。需要长期潜伏、分散风险或考虑数据外传时用，帮助搭出稳健且难以追踪的后端体系。亮点是把隐蔽性、可扩展性和观测面一并纳入设计，而不是单点优化。

---
name: advanced-redteam-ops
description: Use when designing C2 infrastructure or OPSEC for a long-haul red-team op — redirectors, malleable profiles, tiered/segregated infra, living-off-the-land, data exfiltration
metadata:
  type: offensive
  phase: operations
kill_chain:
  phase: [c2, actions]
  step: [6, 7]
  attck_tactics: [TA0011, TA0008, TA0010]
depends_on: [edr-evasion, exploit-development, red-team-ops]
feeds_into: [threat-hunting]
inputs: [c2_framework, redirector_config]
outputs: [c2_infrastructure, opsec_report, exfil_channel]
  ---

# Advanced Red Team Operations

## When to Activate

- Planning advanced red team engagements
- Designing C2 infrastructure with OPSEC
- Understan