Advanced Red Team Operations
Once the basics of an operation are routine, the hard part is staying effective against a defended, well-instrumented target. This advanced red team course covers multi-stage operations, mature command and control infrastructure, and evading modern endpoint and extended detection and response, or EDR and XDR.
You plan and run full-scope adversary emulations against a monitored lab under written authorization, refining tradecraft that survives contact with a capable blue team.
- Duration
- 10 weeks
- Format
- Live online, instructor-led
- Prerequisites
- Red Team Operations and Adversary Emulation
- Class size
- Capped at 12 learners
What you will be able to do
- Plan a long-duration, multi-stage red team operation
- Build and manage mature, resilient C2 infrastructure
- Design payloads and access for defended endpoints
- Understand and evade modern EDR and XDR telemetry in the lab
- Move and persist quietly against active threat hunting
- Run a full-scope adversary emulation from access to objectives
- Report an operation so the blue team measurably improves
Course outline
6 modules
- Long-duration, multi-stage engagements
- Threat intelligence driven emulation
- Objectives against a mature defender
- Team roles and operational security
What you need before you start
- Completion of Red Team Operations and Adversary Emulation
- Confident use of an established C2 framework
- Strong Windows internals and Active Directory knowledge
- Comfort administering Linux infrastructure
Who this course is for
- Experienced red teamers facing mature, well-defended targets
- Operators building or leading an internal red team
- Adversary emulation specialists deepening their tradecraft
- Consultants delivering full-scope engagements
Questions about this course
More in offensive security
CoreHacker Tools, Techniques and Incident Handling
Learn attacker tools and techniques from the defender's chair, then run a structured incident handling process, in a live online course from Toronto.
8 weeks · live online
Contact for pricingView outline
CoreWeb Application Penetration Testing
Hands-on web application penetration testing course that takes you from reconnaissance through exploitation and reporting, using the OWASP Top 10 and beyond.
8 weeks · live online
Contact for pricingView outline
CoreIoT Penetration Testing
An IoT penetration testing course covering firmware extraction and analysis, radio protocols, and the cloud and mobile backends behind connected devices.
8 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.