Forest fire

Red Teaming is the process of using Tactics, Techniques, and Procedures (TTPs) to emulate a real-world threat with the goals of training and measuring the effectiveness of the people, processes, and technology used to defend an environment.

---

Intel-driven

• Introduction
• TIBER-EU
• MITRE ATT&CK
• OST Map

Opsec

• Introduction
• Identify critical information
• Analyse threats
• Analyse vulnerabilities
• Assess risks
• Apply appropriate countermeasures
• Hide your tracks

Preparation

• Introduction
• Falconry (in "In")
• Lay of the land (in "In")

Weaponisation

• Introduction
• Gain unauthorised access
• Windows Scripting Host (WSH)
• HTML Application (HTA)
• Visual Basic for Application (VBA)
• Powershell
• Getting out of the box (BeEF)
• Command and control (C2)
• Attack infrastructure as code (in "In")
• Delivery techniques
• Create a botnet
• SEO poisoning

Password attacks

• Introduction
• Password profiling
• Brute-force and dictionary attacks
• Password spraying
• Hash cracking

Phishing

• Introduction
• Phishing overview
• Mail delivery
• Steal access info with fake login page
• Webpage with BeEF hook
• Use analytics to lure a target
• Fake prompts everywhere
• Pharming overview
• Credential stuffing

Enumeration

• Introduction
• Passive scanning
• Linux
• Windows
• Running services
• DNS
• SMB
• SNMP
• More Windows tools

Escalation

• Introduction
• Windows escalation tools
• Reuseful escalation patterns
• Harvesting passwords
• Quick misconfiguration wins
• Abusing service misconfigurations
• Abusing dangerous privileges
• Abusing vulnerable software

Persistence

• Introduction
• Tampering with unprivileged accounts
• Backdooring files
• Abusing services
• Abusing scheduled tasks
• Logon triggered persistence
• Backdooring the login screen/RDP
• Persisting through existing services

Lateral movement and pivoting

• Introduction
• Mythical blue lake

Data exfiltration

• Introduction
• Data exfiltration (in "Out")

---