GIAC - Red Team Professional (GRTP)

Curriculum

• Module 1: Adversary Emulation Fundamentals
• You will gain an understanding of common terminology, frameworks, and methodology associated with adversary emulation.
• Module 2: Attacking Active Directory
• You will gain an understanding of Active Directory objects, the different authentication methods offered within an Active Directory environment, and the techniques used to attack those authentication methods.
• Module 3: Command and Control infrastructure
• You will gain an understanding of command-and-control deployments, uses, channels and tools including Empire and Cobalt Strike.
• Module 4: Creating the Attack infrastructure
• You will gain an understanding how to create and manage an adversary infrastructure to include, an adversary domain, DNS, and an understanding of redirection and pivoting.
• Module 5: Discovery and Enumeration
• You will gain an understanding of how to perform network and Active Directory discovery and enumeration as well as how to acquire available credentials within the target environment.
• Module 6: Enumerating and Attacking Privileges
• You will learn to understand how to determine privileges within the environment and how to escalate to the required privileges to achieve their objectives including Linux attacks and performing privilege recon remotely.
• Module 7: Gaining Access
• You will gain an understanding on how to perform reconnaissance on a target, how to create and test a malicious payload, and how to deliver the malicious payload ensuring access to the target environment.
• Module 8: Leveraging the Domain
• You will gain an understanding of how to move within the target environment in order to achieve the objectives of the engagement.
• Module 9: Persistence and Exfiltration
• You will gain an understanding on different methods to gain persistence in a environment and how to exploit that persistence to complete the objectives of the engagement including, gaining access to a database, staging data for exfiltration, and emulating ransomware.
• Module 10: Red Team Engagement Planning and Reporting
• You will be able to plan an engagement including tasks such as adversary profiling, scoping the engagement, and red team creation.
• You will learn to understand how to close the engagement including data consolidation, revealing the red teams actions, producing an engagement report, and determining if retesting will be completed.