{"id":31,"date":"2026-10-19T21:21:56","date_gmt":"2026-10-19T10:21:56","guid":{"rendered":"https:\/\/www.mist-integration.com.au\/?page_id=31"},"modified":"2026-10-19T21:21:56","modified_gmt":"2026-10-19T10:21:56","slug":"internal-post-incident-testing","status":"publish","type":"page","link":"https:\/\/www.mist-integration.com.au\/?page_id=31","title":{"rendered":"Internal Post Incident Testing"},"content":{"rendered":"\n<div class=\"wp-block-group alignfull mist-hero has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"mist-eyebrow wp-block-paragraph\">Managed Security Services<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Internal Post Incident Testing<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Also commonly called internal penetration testing, red teaming or post-breach internal penetration testing.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignfull mist-section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\">What is Internal Post Incident Testing?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Internal Post Incident Testing (IPIT) starts with the premise that your network has been breached, is vulnerable to breach, or that someone in your organisation has:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>opened a malicious email attachment<\/li>\n\n<li>browsed to the wrong website and\/or clicked the wrong link<\/li>\n\n<li>plugged in an infected or malicious USB or removable media device.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A post-breach internal penetration test assumes you <strong>will<\/strong> be breached at some point and need to strengthen your security posture.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is one of the most effective and realistic ways to measure your overall operational cyber security posture \u2013 the people, processes and technologies protecting your environment. It tests your network visibility, focusing on network traffic and endpoint behaviour and the detection of potentially malicious operations. It can also measure the detection and response capability of your security team or Managed Security Service Provider (MSSP).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A properly executed IPIT is all about improving your operational cyber security posture. MIST delivers a comprehensive report that allows you to close the security gaps and maintain the confidentiality, integrity and availability of the critical assets in your environment.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignfull mist-section is-alt has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\">Background of user-driven attacks<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To combat today\u2019s sophisticated cyber threat actors, complete situational awareness and network visibility are necessary. Traditional security infrastructure relies on logging security alerts to produce threat visibility \u2013 but alerts and visibility are not the same. Without the ability to \u201csee\u201d threats hiding in normal-looking activity, you cannot possibly stop them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Security tools create and log alerts when they detect something they consider threatening. Capable attackers, however, don\u2019t do threatening things that ring alarm bells. They rely on user-driven attacks and emulated insider behaviour that is silent, stealthy and very normal-looking \u2013 traversing the network, gaining access, establishing beachheads and ultimately stealing, sabotaging or damaging corporate infrastructure and digital assets.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers have long known that the easiest way to breach a network is not by attacking the perimeter, but by socially engineering the users inside. If they succeed, a user will do something that leads to compromise \u2013 opening a malicious email, visiting a bad website, plugging in an unknown USB stick or downloading the wrong application. All it takes is a small foothold for an attacker to take over a user\u2019s account and machine. The attacker becomes the insider, and everything they do looks like normal user behaviour that traditional tools won\u2019t stop \u2013 or even see.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignfull mist-section has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\">The MIST approach<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Internal post-breach penetration testing starts with the premise that a trusted employee has clicked the wrong link, opened the wrong attachment or plugged in the wrong USB device. The adversary now has a foothold inside the network and you have been actively compromised. This testing exercises the security controls and detection and response capabilities of your organisation, simulating what an adversary can do once the perimeter has been breached.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To do this, MIST uses its managed security software to establish a beachhead on a normal domain workstation, or provides an \u201cinfectious device\u201d, and launches all activities from that location using command-and-control techniques to communicate with the \u201ccompromised\u201d system. The objectives are to evaluate internal security controls, security visibility, detection capabilities and your security team\u2019s response to an adversarial threat, and to assess the overall security posture of the internal network. Specific objectives can also be set (for example, retrieving a file from a privileged file server) and discussed in detail before testing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All testing by MIST is performed by a human using a blend of automated and manual procedures. We don\u2019t simply \u201cscan and patch\u201d.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignfull mist-section is-alt has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\">Reporting and deliverables<\/h2>\n\n\n\n<div class=\"wp-block-group alignwide mist-grid is-layout-grid wp-container-core-group-is-layout-d561eee4 wp-block-group-is-layout-grid\">\n<div class=\"wp-block-group mist-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Penetration testing reports<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Following any testing, a full detailed report is made available. It outlines the testing methods used, the findings, any proof-of-concept code for successful exploits, and remediation steps and suggestions.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group mist-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Exploit proof-of-concept development<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In the event of a successful exploit, breach or compromise, MIST documents the testing methodology used, records all gathered evidence, and develops proof-of-concept exploits for repeatable testing.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group mist-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Targeted remediation retest<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Testing may reveal areas of weakness that require reconfiguration, patching or replacement. MIST will retest these areas once remediation is complete. Retesting is included if executed within 90 days of initial testing.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group alignfull mist-cta has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"mist-eyebrow wp-block-paragraph\">Let&#8217;s talk<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ready to take the pressure off your IT?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Our Australian-based team is ready to help. Call <a href=\"tel:+61488687777\">0488 687 777<\/a> or email <a href=\"mailto:sales@mist-integration.com.au\">sales@mist-integration.com.au<\/a> and we&#8217;ll get back to you as quickly as possible.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/www.mist-integration.com.au\/?page_id=10\">Contact us<\/a><\/div>\n\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--1\"><a class=\"wp-block-button__link wp-element-button\" href=\"mailto:sales@mist-integration.com.au\">Email our sales team<\/a><\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Managed Security Services Internal Post Incident Testing Also commonly called internal penetration testing, red teaming or post-breach internal penetration testing. What is Internal Post Incident Testing? Internal Post Incident Testing (IPIT) starts with the premise that your network has been breached, is vulnerable to breach, or that someone in your organisation has: A post-breach internal [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":18,"comment_status":"closed","ping_status":"closed","template":"page-no-title","meta":{"footnotes":""},"class_list":["post-31","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.mist-integration.com.au\/index.php?rest_route=\/wp\/v2\/pages\/31","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mist-integration.com.au\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.mist-integration.com.au\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.mist-integration.com.au\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mist-integration.com.au\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=31"}],"version-history":[{"count":2,"href":"https:\/\/www.mist-integration.com.au\/index.php?rest_route=\/wp\/v2\/pages\/31\/revisions"}],"predecessor-version":[{"id":97,"href":"https:\/\/www.mist-integration.com.au\/index.php?rest_route=\/wp\/v2\/pages\/31\/revisions\/97"}],"wp:attachment":[{"href":"https:\/\/www.mist-integration.com.au\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=31"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}