This includes phishing campaigns, guided use of malware, exploitation of vulnerabilities, lateral movement, social engineering and more. The knowledge obtained, enables the development of response strategies for similar real situations and at the same time measure the levels of protection, detection and response to the attacks performed. The process includes