Most Red Team tests run a few weeks or a month on the long side. While valuable, modern attackers are content to take months or years to breach victim organizations. This session will explore the intricacies of conducting a three year long Red Team test, the benefits of the exercise contrasted with traditional testing, and how to use these tests to better prepare for modern threats.