Reporting

- Timeline and TTP mapping to MITRE ATT&CK - Detection coverage heatmap - Critical findings and remediation - Positive findings (what worked in defense) For each phase provide: tools (Cobalt Strike, Sliver, Mythic, Covenant, Havoc), techniques, OPSEC considerations, and abort criteria. Include a sample attack narrative. Output as a red team plan document.