Visão Geral

Este curso apresenta os fundamentos de operações de Red Team, com foco em simulação controlada de adversários, planejamento de campanhas, reconhecimento, obtenção de acesso, movimentação, persistência, evasão, objetivos de missão e avaliação da capacidade defensiva.

Objetivo

Após realizar este curso, você será capaz de:

• Planejar operações de Red Team
• Simular comportamentos adversários
• Mapear caminhos de ataque
• Avaliar controles defensivos
• Documentar resultados de operações

Publico Alvo

• Red Team Operators
• Penetration Testers
• Profissionais de Cybersecurity
• Threat Emulation Teams
• Blue Team e SOC

Pre-Requisitos

• Conhecimentos de redes
• Experiência com Windows e Linux
• Conhecimentos de Active Directory
• Familiaridade com técnicas de penetration testing
• Conhecimentos de PowerShell e scripting

Conteúdo Programatico

Module 1: Red Team Fundamentals

1. Red Team concepts
2. Adversary simulation
3. Threat emulation
4. Objectives and mission planning
5. Rules of engagement
6. Operational security
7. Attack lifecycle
8. Adversary behavior
9. Detection-aware operations
10. Red Team governance

Module 2: Reconnaissance and Target Discovery

1. Passive reconnaissance
2. Active reconnaissance
3. OSINT
4. Attack surface discovery
5. Network mapping
6. Identity discovery
7. Technology fingerprinting
8. External attack surface
9. Internal reconnaissance
10. Target prioritization

Module 3: Initial Access

1. Initial Access concepts
2. Phishing simulation
3. Public-facing applications
4. Valid account abuse
5. External attack paths
6. Credential-based access
7. Initial foothold assessment
8. Access validation
9. Detection opportunities
10. Initial access documentation

Module 4: Active Directory Operations

1. Active Directory reconnaissance
2. Identity enumeration
3. Privileged account discovery
4. Credential Access
5. Kerberos attack concepts
6. NTLM attack concepts
7. Privilege escalation
8. Lateral Movement
9. Domain compromise paths
10. Active Directory threat emulation

Module 5: Command and Control

1. Command and Control concepts
2. C2 architecture
3. Communication channels
4. Network-based detection
5. Endpoint-based detection
6. C2 infrastructure security
7. Operational security
8. Beaconing concepts
9. Detection-aware C2
10. C2 monitoring

Module 6: Defense Evasion and Persistence

1. Defense Evasion concepts
2. Detection surface
3. Security control analysis
4. Persistence concepts
5. Privileged persistence
6. Authentication persistence
7. Endpoint security controls
8. EDR considerations
9. Detection engineering
10. Defensive validation

Module 7: Lateral Movement and Objectives

1. Lateral Movement
2. Credential reuse
3. Remote administration
4. Privilege escalation
5. Internal reconnaissance
6. Target identification
7. Mission objectives
8. Data access simulation
9. Objective completion
10. Attack path documentation

Module 8: Red Team Campaign Execution

1. Campaign planning
2. Attack chain development
3. Operational coordination
4. Detection monitoring
5. Blue Team interaction
6. Evidence collection
7. Attack timeline
8. Defensive control assessment
9. Lessons learned
10. Red Team campaign case study