**Objective-based:** Red teams pursue specific objectives (e.g., access the crown jewels, exfiltrate customer data, disrupt operations) rather than finding all possible vulnerabilities - **Adversary emulation:** Red teams emulate specific threat actors, using their known TTPs - **Stealth-focused:**