Offense for Defense with Red Siege

Introduction

• • Learn the value of offensive knowledge in strengthening defensive strategies.

• • Understand the psychology and tactics of attackers to better defend against them.

Implementing Defensive Speedbumps

• • Discover techniques to slow down attackers, making it harder for them to navigate your systems undetected.

Attack Emulation Tools

• • Gain hands-on experience with Atomic Red Team and the MITRE ATT&CK framework to simulate attacks and test defenses.

OSINT And Reconnaissance

• • An in-depth look at identifying public information about a target organization and how it is used by attackers.

Attack Methodologies

• • Dive into various attack vectors such as password attacks, phishing, and exploitation tactics to understand how attackers gain access.

Initial Access

• • A deep dive into the most common methods for initial access used by attackers, including phishing, password guessing, and exploitation.

Password Attacks and Password Security

• • Explore how attackers guess passwords and for initial access, privilege escalation, and lateral movement, as well as strategies to detect and prevent these types of attacks.

Evasion

• • Examine common tools and tricks used by threat actors to evade defensive tools to evade common defenses, such as AntiVirus and EDR

Persistence

• • Discuss how attackers maintain access via various persistence mechanisms and examine ways to identify these persistence mechanisms to eradicate an embedded attacker.

Privilege Escalation (PrivEsc)

• • Understand how and why attackers extend their reach by escalation privileges, commonly from a low privileged user to system or root level access, or even via a more privileged domain user.

Lateral Movement

• • Learn to identify and block lateral movement within networks and understand how and why attackers need to move throughout the network.

File Share Exploration and Auditing

• • File shares often contain a treasure trove of information useful to attackers and are too often improperly secured or at risk due to data being stored in the incorrect location. You’ll learn how to examine these prevalent and large shares to easily identify risky information that can expose sensitive information or lead to privilege escalation or lateral movement.

Active Directory (AD) and Kerberos

• • Examine how Active Directory and Kerberos work to provide authentication and authorization, and common high-impact attacks used by threat actors, as well as defenses for these attacks.

Active Directory Certificate Services (AD CS) Security

• • Delve into securing AD CS, identifying common misconfigurations which can lead to simple privilege escalation or persistence and the tools to identify and attack these issues.

Hands-On Workshops

• • Each key section includes practical exercises, allowing participants to apply what they’ve learned in simulated environments to reinforce their understanding and skills.

Course Conclusion

• • Summarize key takeaways, engage in an open Q&A to clarify doubts, and discuss strategies for continued learning in cybersecurity defense.