Red Team Ops
Adversary Simulation and Red Team Operations.
Red Team Ops is an online, self-study course that teaches the basic principles, tools and techniques synonymous with red teaming.
Students will first cover the core concepts of adversary simulation, command & control, engagement planning and reporting.
They will then go through each stage of the attack lifecycle - from initial compromise to full domain takeover, data hunting and exfiltration. Students will learn how common "OPSEC failures" can lead to detection by defenders, and how to carry out those attacks in a stealthier way.
Finally, they will learn how to bypass defences such as Windows Defender, AMSI and AppLocker.
Course Curriculum
-
-
Course Introduction
FREE PREVIEW -
Red Team Ops Lab
-
What is Red Teaming?
FREE PREVIEW -
What is OPSEC?
-
Primum non nocere?
-
Attack Lifecycle
-
Engagement Planning
-
Post-Engagement & Reporting
-
-
-
Cobalt Strike
-
Listener Management
-
Listener Management Demo
-
Generating Payloads
-
Interacting with Beacon
-
Interacting with Beacon Demo
-
Pivot Listeners
-
Pivot Listeners Demo
-
-
-
External Reconnaissance
-
DNS Records
-
Google Dorks
-
Social Media
-
-
-
Initial Compromise
-
Password Spraying
-
Password Spraying Demo
-
Internal Phishing
-
Initial Access Payloads
-
Visual Basic for Applications (VBA) Macros
-
VBA Macro Demo
-
Remote Template Injection
-
Remote Template Injection Demo
-
HTML Smuggling
-
-
-
Host Reconnaissance
-
Processes
-
Seatbelt
-
Screenshots
-
Keylogger
-
Clipboard
-
User Sessions
-
-
-
Host Persistence
-
Task Scheduler
-
Startup Folder
-
Registry AutoRun
-
Hunting for COM Hijacks
-
About this course
- £365.00
- 167 lessons
- 2 hours of video content
FAQ
-
What prerequisite knowledge do I need?
Students should have a good working knowledge of Windows and Active Directory environments. Prior penetrating testing experience would be a bonus. Familiarity with C, C# and PowerShell would also be advantageous but not essential.
-
Is lab access included with the course?
You can purchase lab time with the course - see the pricing options below.
-
Does the lab have usage limits?
Yes, you are limited in the total number of hours that you can run the lab for. These are 40/80/120hours for the 30/60/90 day options respectively.
-
What if I don't use all the hours?
As a rule of thumb, any unused hours are lost. Cases that involve 'damnum fatale' are assessed on a case-by-case basis.
-
What if I hit the usage cap before my lab expires?
Contact [email protected] to discuss your options.
-
Can I choose my lab start time?
No, lab access starts at the time of purchase.
-
I left my lab running, can I have my hours back?
Managing your runtime is your responsibility and we cannot reimburse you for hours lost by forgetting to shut the lab down.
-
Does the course include an exam attempt?
Yes - you get 1 free exam attempt when you purchase the course. The voucher does not have an expiry date.
-
Can I take the exam without buying the course?
Yes - just pay the fee and schedule the exam from the booking page.
Student Reviews
Beyond Expectations - 5 Stars
Eric Osinski
Zero Point Security's RTO course content went above and beyond my expectations. The course modules are well designed, organized and informative. Additionally...
Read MoreZero Point Security's RTO course content went above and beyond my expectations. The course modules are well designed, organized and informative. Additionally, the lab environment acts as a fantastic tool to practice the techniques that you're learning alongside the modules. The fact that the course content is updated frequently and is available indefinitely provides great value to enrollees. Overall, I highly recommend this course to those looking to solidify their foundational knowledge of red team methodology and testing through command and control.
Read LessAmazing value course
Konstantin Karabadzhakov
After finishing the OSEP and immediately jumping into the CRTO, I can certainly say I learned even more in regards to enumeration of domains, active director...
Read MoreAfter finishing the OSEP and immediately jumping into the CRTO, I can certainly say I learned even more in regards to enumeration of domains, active directory, lateral movement, etc. The addition of cobalt strike and touching on Splunk and detections is of incredible value ! I can only say I highly recommend to course !
Read LessTruly amazing
Jeremiasz Pluta
This course is amazing and should be strongly recommended for anyone, that wants to take a step into the world of red teaming. It presents the matters of red...
Read MoreThis course is amazing and should be strongly recommended for anyone, that wants to take a step into the world of red teaming. It presents the matters of red teaming in simple, understanding way. Everyone who's relatively familiar with penetration testing can learn many new techniques and begin to feel confident in area of red teaming.
Read LessGreat Intro!
STEPHEN HARUNA
This is a must for every offensive security person.
This is a must for every offensive security person.
Read LessA must have certificate.
Perry Daniel Junior Ofori
I have gained in two months what it would have taken me a year to learn. The TTP and knowledge in this course is publicly available but having having someone...
Read MoreI have gained in two months what it would have taken me a year to learn. The TTP and knowledge in this course is publicly available but having having someone structure it as a guide with accompanying labs makes knowledge acquisition faster.
Read LessThis course is gold
Roberto La Piana
This course is gold if you're ready to get better at Active Directory, and level up your skills. Really quality material, and well explained. I'm already usi...
Read MoreThis course is gold if you're ready to get better at Active Directory, and level up your skills. Really quality material, and well explained. I'm already using this knowledge on engagements and I'm just half-way through. Although CobaltStrike heavy, all concepts, commands and tools can be used/applied to scenarios where CobltStrike is not a thing with very little modification. I do recommend some base knowledge before enrolling, but that goes without saying. Well done ZeroPointSecurity
Read LessPrice Options
Purchase the course by itself or with included lab time. Each option comes with a free exam attempt.