NOTE: Some of the topics in this article are probably going to be a bit contentious, but part of the hope in publishing this article is to drive some additional discussion within the offensive security community Ransomware has become one of the most prevalent threats that companies face today. It [...]
| Date | August 5, 2023 |
|---|---|
| End | August 8, 2023 |
| Location | BlackHat USA |
| Address | Virtual |
Click here to add this event to your google calendar
Red teaming aims to stress an organization’s defensive posture and provides a snapshot of how they will perform against day-to-day threats. Modern enterprises leverage a Red Team exercise to identify areas of weakness within their organization. These types of exercises are only as good as the real-world threats they are designed to emulate. This is why careful planning is essential to any successful Red Team operation. This course will teach the process and methodology of planning and executing a Red Team engagement. Students will learn to ingest Open-Source Intelligence (OSINT) to replicate adversary Tactic, Techniques, and Procedures (TTPs) and provide effective feedback to Blue Teams.
Students will begin by analyzing a representative organization to identify core objectives for an engagement and negotiate Rules of Engagement (ROE). Next, they will construct tailored emulation plans to meet their customer objectives and build a secure cloud-based Red Team infrastructure for executing against the lab-hosted enterprise network. In addition to exploring TTPs most commonly employed by APTs, this course teaches the basics behind Red Team campaign planning, team coordination, and executing Command and Control (C2) implants utilized in coordinated multi-operator engagements.
This class is intended for offensive and defensive security professionals wanting to learn how to effectively emulate Advanced Persistent Threats (APTs) and conduct Red Team engagements against enterprise networks. Students are encouraged (but not required) to have experience in network defense, incident response, and/or offensive tools and techniques.
Day 1:
Day 2:
Day 3:
Day 4:
