This is me trying to articulate what I understand in my daily encounters with red teaming, pentesting and general infosec tomfoolery.