Easier said than done, the red team can’t break real laws (routing through compromised hosts) where real hackers will.