The Original Rules
Dec 2024Many people asked me if The Rules are related to the ones I had with my team and posted back in the day in the other blog. The answer is, sort of. Those rules served a purpose back in the day.
Since the Red Teams Blog Rules are still very relevant, I decided to repost them here. For posterity.
Originally posted on Feb 2010 in the Red Teams Blog.
The Original 12
- Always have an escape plan
- Be aware of your surroundings.
- Assumption is the mother of all fuckups.
- Always have a backup plan.
- Never get caught.
- Keep your mouth shut.
- KISS: Keep it simple, stupid.
- Simple and light equals freedom, agility and mobility.
- Plan, execute and vanish.
- You don’t have to like it-you just have to do it.
- Always invest in good quality stuff.
- Trust your gut.
The Complete Rules
- Always double-tap
- Always have an escape plan.
- Be aware of your surroundings.
- Assumption is the mother of all fuckups.
- Always have a backup plan.
- Never get caught.
- Keep your mouth shut.
- KISS: Keep it simple, stupid.
- 7 Ps: Proper Planning and Preparation Prevents Piss Poor Performance
- Plan, execute and vanish.
- Always invest in good quality.
- Trust your gut.
- Always carry a knife.
- Do one thing at a time.
- Pick your battles…
- Simple and light equals freedom, agility and mobility.
- Target dictates the weapon and the weapon dictates the movement. ("Mack" Machowicz)
- Use ACTE: assess the situation; create a simple plan; take action and evaluate your progress. ("Mack" Machowicz)
- Don’t believe what you’re told. Double check.
- Hide in plain sight. Blend in.
- Think like a man of action, act like a man of thought.
- The more sophisticated the technology the more vulnerable it is to primitive attacks. People often overlook the obvious.
- If you’re happy with your security, so are the bad guys.
- “Bad guys attack, and good guys react” is not a viable security strategy.
- An adversary is most vulnerable to detection and disruption just prior to an attack.
- Low-tech attacks work (even against high-tech devices and systems).
- Never mess with a man’s coffee.
- Don’t spend time trying to move your opponent, just move yourself.
- The quality of your friends always matters more than the quantity.
- Always provide correction in private and praise in public.
- Opening the door for a lady is not optional.
- You can do big things with a small team.
- Don’t go into debt.
- Do not publish your life online, keep your life private.
- The GORUCK - Under promise and over deliver.
- Progress comes to those who train and train; reliance on secret techniques will get you nowhere. (Morihei Ueshiba)
- You must understand that there is more than one path to the top of the mountain. (Miyamoto Musashi)
- To know ten thousand things, know one well. (Musashi)
- You are what you do when it counts.
- If you think it was too easy, it was a trap. Look for jumping guards coming from the sides.
- The bad guys don’t obey our security policies.
- If there’s a question about if it’s necessary, remove it. Less is more and more is lazy. (Jason McCarthy, GORUCK founder)
- Once is an accident. Twice is coincidence. Three times is an enemy action.
- Never do the same thing twice.
- Always take care of your team first, then your gear and finally yourself.
- Check the crowd: who is staring at you, who is all the sudden silent when you enter.
- Always sit with your back to the wall, even when there are mirrors you can use.
- Never take the elevator.
- The solution is in the problem.
- Fail to Red Team and everything will go according to plan—right up to the point it doesn't. (Red Team Journal)
- If it's stupid but works, it isn't stupid.
- Don’t play by the rules.
- Don’t become predictable.
- Our fucks are our fucks alone to give. (Patrick Rhone)
- Plans are useless, but planning is indispensable. (Dwight D. Eisenhower)
- Act, don’t react.
- Shitty situations inspire brilliant solutions.
- Establish baselines. Look for anomalies. Have a plan.
- If you want truly to understand something, try to change it.
- Expectations = Disappointment. Don't expect anything.
- You don’t have to like it, you just have to do it.
- Understand. Anticipate. Adapt. (Red Team Journal)
- Real attackers will make you patch your people.
- First you check, then you double-check. Finally you commit.
- He who angers you conquers you.
- Find a way to succeed.
- Clap only when you are impressed.
- Once is an accident, twice is... Huh… No, I don't believe in coincidences. Twice is enemy action. (overwrites 42).
- Add things until it starts sucking, take things away until it stops getting better. (Frank Chimero)
- GLBYS: Gary, look before you sit.
- If you can't be smart, you better be strong.
- Be hard to break.
- Every time you train, train with the motivation and purpose that you will be the hardest person someone ever tries to kill. (Tim Kennedy)
- Tremendous detailed planning, violent execution.