SC440: Red Teaming Master Class

Agenda:

Fundamentals and Team Building

• Introduction to Red Team Operations and role assignment
• Team building exercises and communication training
• Overview of attack tactics and the MITRE ATT&CK Matrix
• Simulation 1: Small attack exercise with focus on team communication

Reconnaissance and Initial Attacks

• Advanced OSINT techniques (Reconnaissance Specialist)
• Social Engineering strategies (Social Engineer)
• Exploitation fundamentals (Exploit Developer)
• Simulation 2: Information gathering and initial compromise

Penetration and Propagation

• Advanced exploitation techniques
• Lateral movement in the network (Cyber Red Team Operator)
• Physical Security bypass methods (Physical Security Specialist)
• Simulation 3: Complex attack with physical and digital components

Persistence and Data Exfiltration

• Advanced persistence techniques
• Data exfiltration and obfuscation methods
• Adaptation to Blue Team countermeasures
• Simulation 4: Long-term operation with adaptation to defense

Reporting and Lessons Learned

• Creation of professional reports (Reporting Specialist)
• Presentation of results to management
• Lessons learned and improvement recommendations
• Final simulation: Complete Red Team operation

Continuous Focus Topics:

• Cross-role collaboration
• Decision-making under pressure
• Leadership skills (especially for Red Team Operations Lead)
• Adaptation to unexpected situations
• Time management and task prioritization
• Ethical considerations and legal aspects

Methodology:

• Interactive presentations and discussions
• Hands-on exercises in lab environment
• Realistic simulations against an active Blue Team
• Role-playing games for soft skills improvement
• Daily debriefings and feedback sessions

Objectives:

Target audience:

• Experienced IT security specialists
• Penetration testers
• Cybersecurity experts who want to deepen their skills in Red Team Operations and improve their collaboration in a team

Prerequisites: