You get to play the bad guy! The Python for Red Teams course challenges you to create attack procedures for penetration testing. Rather than using a plan someone else created, you’ll create it. That means it won’t have known signatures that the good guys recognize.

By leveraging what you learned with Python and new concepts in the course, you will develop a framework that is both extensible and easy to use. In this 5 day course, the instructor will give you a sample framework that you can use as an example. Each module in the course will allow you customize and extend your platform while learning to convert and import new tactics and techniques.

The topics in the course range from simple scanners to custom browser exploitation to privilege escalation, all built into a custom platform. On the final day of the course, you’ll have the challenge of using your new attack platform in a live assessment, including developing new features on-the-fly to overcome the network’s defenses.

You will come out of the course with a plan you can use and modify in future assessments.

This two-week course focuses on methods and processes professional "Blue" teams use in business and government. Instructors use open-source tools to teach you how to secure a network and its hosts. The course brings you through four stages of defense: identify, protect, respond and recover.

Identify: You will first learn the skills to identify your network, permissible tools, mission scope & key terrain, and then map the network and its hosts.

Protect: You’ll also learn to protect baselines and configurations and how to evaluate A/V & IDS systems. You will perform host-based assessments and find vulnerabilities and anomalies, which helps continuous integrity monitoring.

Respond: In addition, you’ll develop and implement an incident response plan, suggest better sensor placements, help with log correlation, coordinate response activities, develop and apply risk mitigation response.

Recover: Finally, you will develop a recovery plan and make final recommendations. Your final recommendations will take into account system hardening techniques, priority lists, and risk mitigation. Each segment of the course covers network devices, Unix and Windows Operating Systems and policies.

Cyber Threat Emulation Professional (CTEP) emulates the hackers trying to compromise your network. The CTEP shows you how to think and act like them, using their advanced exploitation techniques to penetrate a network. You’ll learn how to conduct Open Source Information Gathering (OSINT), scanning and enumeration, network mapping and exploitation to gain access to networks and avoid being kicked out. When you learn what a network’s weaknesses are, your CPP can fix them.

Discovery and Counter-Infiltration Professional (DCIP) teaches you how to hunt down the attackers on your network. DCIP teaches you the methods, tools, techniques and tradecraft of your adversary so you can identify them by behaviors that standard network monitoring doesn’t catch.

You’ll learn how to recognize their behavior using commercial and in-house software that recognizes hackers’ telltale signatures. As a DCIP, you’ll conduct timeline, log and traffic analysis to map out the attack and collect its data so you’ll know how to prevent a repeat. Forewarned is forearmed!