[Hosted Class] Mastering The Red Tape of Red Teaming

Many graduates of technical training classes offered at Red Team Alliance come away deeply satisfied with their new skills and knowledge of tools and tactics and often begin immediately thinking of the next logical steps in their advancement. We are frequently asked the question, “How does someone approach the business opportunities in this field and parlay technical skills into real-world business impact?”  Up until now, topics like how to build an internal red team, how to market red teaming to clients, how to scope jobs, how to write and revise Statements of Work, and how to navigate the delicate process of negotiating and billing for services have been relegated only to discussions on Discord or at conferences. That all changes now.

Pine Risk Management is a firm whose leaders have a long legacy in this industry as well as a close ties to Red Team Alliance – having worked with a number of our principals on real-world jobs. They have developed a training class that tackles these specific subjects,teaching students to build professional red teams and become more professional red teamers. We at RTA are proud to host PRM’s “Red Tape of Red Teaming” training class at our facility and see this as a fantastic option that can benefit many of our graduates and colleagues in the industry.

This two-day training course is built for red teamers, penetration testers, and offensive security professionals who want to expand their professional capabilities into the physical red teaming (PRT) space. The technical skills of PRT are straightforward, but the professional and impactful skills are just as critical but require education and development just as much as lock-picking, RFID hacking, or safe-cracking. Join us as we delve into the world of physical red teaming, translating many of the skills, frameworks, mindsets, and approaches from the cyber world into the physical space. From working with physical security teams, letters of authorization, drone laws, ethics, social engineering, covert-entry OSINT, contract negotiation, legal pitfalls to avoid, documenting findings in a deliverable report, and more, students will walk out of the course as well-rounded red teamers, prepared to safely, smartly, and impactfully conduct physical red team assessments.

Course Outline :

• The Foundation

• Differences between Physical and Cyber Stress Tests

• Legal

• Ethical

• Risk (Consequences of Mishaps)

• OpSec

• Patches and Vulnerability Mitigation

• Stages of Testing

• Prioritization & Threat Modeling

• Adversary Capabilities

• Vulnerability & Attack Vector Lifecycle (from GVT to YouTube)

• Scoping the Engagement

• De-Risking the Red Team

• Physical-Focused TTPs

• Social Engineering

• OSINT

• Surveillance

• Building out a Toolkit 

• Building a Red Team

• Getting Buy-In

• Establishing a Framework

• Gathering the Team: The roles and skills you need to conduct an effective assessment. 

• Maturing a Red Team

• Lessons Learned

• Poison Circles

• Templates

• Prioritization Matrix

• Threat Modeling Graphics

• Proposal Template

• Letter of Authorization

• OpsPlan Template

• Findings Template

• Vulnerability & Risk Register Template

• Powerful Communication 

• Ninja Writing: Writing impactful reports that protect you and your company. 

• Featured Findings: How to present findings to your audiences. 

• Testing the Untestable: Non-Traditional Tests

• Explosives Detection

• Executive Protection

• Creative testing and proof-of-concept exercises

Your Instructors:

The course instructors built the largest physical red team in Silicon Valley at a FAANG company and have hired more professional physical red teamers than any other duo in the last five years. They know what it takes to thrive or dive in the red team space and are here to help individuals and teams build and run effective physical red team engagements. Whether you’re a mature red teamer looking to level-up your ability to run physical tests, or a new offensive security professional looking to get a break into red teaming, this course will cover the knowledge, skills, and experience you need to advance your career and team. 

Note: This is not a technical skills focused course. For lock-picking, RFID hacking, and Flipper Zero courses see Red Team Alliance’s course catalog. Technical skills make you a better hacker. The “Red Tape of Red Teaming” makes you a better professional hacker. 

Please note that each class day will include one hour of technical lab time to explore gadgets, pick locks, and ask inquisitive questions of our highly skilled technical penetration experts from PRM and RTA.