SECURITY TESTING / COMMUNICATION
Security Assessment After-Action Review
A clear account of testing objectives, constraints, observed activity, and lessons for improving future assessments.
Medusa / Net-Safe scenario · December 2024
Testing scope and agreed timing established.
Periods of timeout and absent target activity complicated validation.
Monitoring and scanning observations reviewed against the agreed scope.
Clarify communications, availability, and escalation checkpoints.
THE APPROACH
Technical detail.
Clear decisions.
This project brings together practical implementation thinking, clear documentation, and an emphasis on making complex technical work understandable and useful.
PROJECT WALKTHROUGH
Inside the work
What happened
The after-action material describes a scheduled assessment with periods of network inactivity and connection timeouts. Tools remained active, but intermittent access limited the ability to validate activity consistently.
Why constraints matter
A test result is only as strong as the conditions under which it was obtained. When connectivity or target availability changes, the team must distinguish confirmed findings from unverified observations and document the limits of the test.
Improve the next engagement
The review supports stronger pre-test connectivity checks, a clear contact and escalation path, timed status checks, and a shared process for documenting outages or scope interruptions.