Red Team Operations

Stealth, detection-aware operating, and the full kill chain against active defenders

The post-pentest course. Operating against an active blue team: AV/EDR evasion, AMSI/ETW bypasses, syscalls, process injection, OPSEC for offensive ops, custom C2 (Sliver/Havoc/Mythic), persistence at scale, and adversary emulation against MITRE ATT&CK. Recommended after AYSEC-101.

Lessons

• Red Team vs Pentest
• Red Team Infrastructure
• Initial Access
• C2 Tradecraft
• Stealthy AD Domination
• EDR / AV Evasion
• Purple Team & Reporting
• Capstone: Mock Red Team Engagement