Module 1: Red Team Methodology
The seven-phase red team methodology: preparation, intelligence, reconnaissance, access, post exploitation, cleanup and backout, and reporting, with the judgment behind each.
Red-Team-Courses
Module 10: Initial Access: Phishing and Delivery
Distinguish phishing delivery, interaction, execution, and access. Interpret campaign metrics, modern Office controls, and Windows architecture with worked examples.
Module 11: Situational Awareness and Host Operations
Build a current host-state record using Windows and Linux identity, process, socket, and routing evidence, with a worked snapshot comparison.
Module 12: User Persistence
Understand user startup triggers, HKCU context, and restoration. Follow a benign Notepad Run-entry lab with evidence and cleanup checks.
Module 13: Local Privilege Escalation
Evaluate Windows privilege escalation paths through service permissions, DLL loading, evidence quality, and a read-only lab exercise.
Module 14: Privileged Persistence and Process Migration
Understand Windows service persistence, process lifetime, architecture, and migration tradeoffs through read-only inspection and a service lifecycle exercise.
Module 15: Persistence Cleanup and Defense Evasion
Restore persistence changes with a precise artifact ledger, correct registry identity, evidence preservation, and independent verification of cleanup.
Module 16: Domain Privilege Escalation and Kerberos Abuse
Analyze Kerberos service-ticket exposure, account privilege, encryption choices, and delegation evidence with a domain escalation review record.
Module 17: Lateral Movement and Expanding Access
Plan lateral movement with explicit name resolution, authentication, authorization, service, and rollback evidence instead of assuming every credential reaches every host.
Module 18: Cross-Domain Pivoting and LDAP Enumeration
Analyze trust direction, selective authentication, SID filtering, LDAP scope, and query results with a cross-domain pivot decision record.