Offensive Ops - SEC665: Red Team Ops: Developing Adversary Techniques

Operate against hardened enterprise and government networks where standard red team techniques fail. SEC665 delivers the advanced tradecraft required when targets have mature security programs, modern EDR/NDR, and cloud-integrated environments.

This course is built for experienced operators: DoD red teams, intel community professionals, and enterprise practitioners who need capabilities beyond foundational penetration testing.

Master advanced offensive operations:

Covert Infrastructure and Initial Access

• Build attribution-resistant C2 infrastructure with Terraform
• Execute AiTM phishing to bypass MFA
• Deliver payloads via WebAssembly smuggling and DLL sideloading
• Evade identity-aware security during reconnaissance

Privilege Escalation and Lateral Movement

• Dump credentials despite Protected Processes and Credential Guard
• Relay attacks over C2 channels in hardened environments
• Move laterally with COM/DCOM while evading EDR telemetry
• Modify Impacket for stealth operations

Cloud and Identity Attacks

• Compromise Entra ID through device code phishing
• Pivot between cloud and on-prem environments
• Exploit AD Certificate Services and Configuration Manager
• Backdoor CI/CD pipelines for persistent access

EDR Research and Kernel Tradecraft

• Reverse engineer EDR kernel components and minifilters
• Develop custom BOFs and obfuscated .NET tooling
• Identify EDR blind spots through callback analysis
• Understand driver exploitation risks and techniques

Culminates in Rogue One, a full-day CTF against a hardened multi-domain environment where you apply everything learned.

36 CPE credits across 5 intensive days.