Red Team Operations II

RTO-II

Red Team Operations II

Red Team Operations II (RTO-II)

Overview

The Certified Red Team Operations II Specialist (RTO-II) certification is an advanced course designed for cybersecurity professionals who have a foundational understanding of red teaming and wish to enhance their skills further. This course focuses on advanced operational security (OPSEC) tactics and defense bypass strategies, building upon the concepts introduced in the initial Red Team Operations course.

The certification validates an individual’s ability to:

  • Build secure and resilient command-and-control (C2) infrastructure.
  • Develop custom tooling for various offensive actions using C++ and C#.
  • Employ advanced techniques to bypass security measures such as AV and EDR solutions.

Course Details

The RTO-II certification consists of 84 lessons that delve into advanced red team operations.

Topics Covered:

  • C2 Infrastructure: Building secure on-premise C2 infrastructure using public cloud redirectors and HTTPS.
  • Advanced Programming: Deepening knowledge of C++ and C# with Windows APIs for offensive actions.
  • Memory Cleanup Techniques: Learning to clean up memory indicators of Cobalt Strike’s Beacon and using in-memory obfuscation.
  • Attack Surface Reduction: Strategies for identifying and exploiting weaknesses in ASR and Windows Defender Application Control.
  • Bypassing Security Solutions: Techniques to circumvent Event Tracing for Windows (ETW), userland hooking, and kernel callbacks.

Learning Materials:

Participants will receive access to comprehensive resources, including instructional videos and practical exercises, designed to reinforce their understanding of advanced red team operations.

Exam Structure

The RTO-II certification is awarded upon successful completion of all course lessons, with no formal exam required. Candidates demonstrate their understanding through practical application within the course.

Key Exam Requirements:

  • Completion of all lessons in the course.
  • Participation in practical exercises designed to reinforce learning.

Who Should Take RTO-II?

The RTO-II certification is ideal for:

  • Red team specialists looking to enhance their operational capabilities.
  • Penetration testers wanting to deepen their understanding of advanced attack techniques.
  • Malware developers interested in learning about the latest tradecraft in adversarial operations.

Resources