Onderwerp
Automatisering & ICT/IT
Communicatie
Financieel
HR
Inkoop & logistiek
Management
Secretarieel & Administratief
Marketing
Opleiding & Onderwijs
Persoonlijke Effectiviteit
Productie, techniek & bouw
Kwaliteit- & Projectmanagement
Sales
Vitaliteit & Gezondheid
Taalcursus
Zorg & Verzorging
Juridisch
Internet & Media
Arbo & Veiligheid
Hobby & Vrije Tijd
Vastgoed & Makelaardij
Abonnementen
Locatie
Niveau
Type
Keurmerk

Opleidingen

55.730 resultaten

Masterclass: Best Practices of Managing the Cloud [BMC]

CQure Virtual English ma 30 nov. 2026
OVERVIEW During this course, participants will gain essential cybersecurity knowledge and practical skills in cloud management best practices. The course provides a hands-on overview of proven approaches for securely managing cloud environments. It is designed to help organizations effectively structure, operate, and govern cloud resources while maintaining flexibility, control, and operational efficiency. Participants will learn recommended strategies for cloud security, governance, and operations, enabling them to make informed decisions, reduce risk, and support sustainable cloud adoption across different cloud models. Virtual Learning This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins. OBJECTIVES Provide a practical overview of proven best practices for managing cloud environments effectively and securely Understand how to structure, operate, and govern cloud resources while maintaining flexibility, control, and operational efficiency Gain insight into recommended approaches for cloud management, security, and governance Enable informed decision-making, risk reduction, and support for sustainable cloud adoption without locking into a single operating model AUDIENCE The course is perfect for security architects, Entra ID administrators, security administrators, and security auditors. CONTENT This Live Virtual Class Best Practices of Managing the Cloud Agenda will be posted soon.
€3.500
Klassikaal
max 16

Infrastructure Pentesting Bootcamp [IPB]

CQure Virtual English ma 18 jan. 2027
OVERVIEW Infrastructure Pentesting Bootcamp is perfect for experienced cybersecurity pros—think penetration testers, security analysts, and IT administrators—who want to up their game in network defense and attack strategies. During this bootcamp, participants will dive into the essential tasks for high-quality penetration testing. We’ll explore efficient network mapping and target discovery methods, search for vulnerabilities with a focus on reducing false positives through manual verification, and master exploitation techniques using both custom and commercial tools. OBJECTIVES In-depth knowledge of reconnaissance and enumeration: You’ll learn how to map and analyze networks to spot vulnerabilities and potential entry points. Advanced skills in vulnerability & threat hunting:  Gain expertise in using cutting-edge tools and techniques to find, understand, and exploit system weaknesses. Mastery of Active Directory (AD) and Azure Entra ID exploitation: Discover sophisticated attack and defense tactics for identity-based attacks. Proficiency in advanced Windows services attacks: Learn how to exploit and defend against attacks on critical Windows services and infrastructure.  Expertise in enterprise exploitation and post-exploitation techniques: Understand how to exploit key enterprise services and maintain persistence within compromised networks.   AUDIENCE Penetration Tester: Experienced in performing authorized simulated attacks to identify vulnerabilities and seeking to deepen your skills in advanced network and system exploitation. Security Analyst: Responsible for monitoring, analyzing, and defending against security threats and looking to enhance your ability to identify and mitigate complex vulnerabilities. IT Professional: Managing and securing IT infrastructure, eager to learn cutting-edge techniques to protect your organization’s assets from sophisticated cyber-attacks. Cybersecurity Professional: Focused on safeguarding organizational data and systems, aiming to stay ahead of the latest threats and improve your defensive strategies. Geeks with an IT Background: Excited to start an adventure in the cybersecurity pentesting field, ready to dive deep into hands-on learning and practical application of advanced pentesting techniques. CERTIFICATION After completing the course, participants will receive a CQURE Certificate of Completion and will also be eligible for CPE points. CONTENT DAY 1: Mastering Reconnaissance and Enumeration Module 1. Reconnaissance Techniques a) Review of goals for testing b) Mastering scanning tools c) Attacking password authentication d) Executing initial access techniques e) Network traffic sniffing and analysis f) Covert channel delivery and exfiltration Module 2: Operating system oriented environment enumeration a) Understanding Windows & Linux network architecture b) Enumerating Windows domains and workstations c) Identifying high value targets (users, admins, devices etc.) d) Identifying roles of different machines (Domain Controllers, File Servers, etc.) e) Utilizing Nmap for operating system specific scans f) Accessing sensitive data Daily Summary: Discussing possible points of entry and mitigation strategies. DAY 2: Mastering Hunting for Vulnerabilities Module 3: Hunting for Vulnerabilities a) Discovering live systems b) Getting information from open ports c) Misusing typical services NetBIOS, SMB, and other d) Metasploit and other tools e) Automation techniques f) Mastering Powershell / Powersploit g) Manipulating SMB, RDP, and other protocols for control and data exfiltration DAY 3: Mastering Identity Attacks and Protocol Flows Module 4: Attacks on NTLM: Execution and Mitigations a) Understanding and exploiting NTLM b) Pass-The-Hash c) Over-Pass-The-Hash d) NTLM relay e) NTLM attacks detections f) Hardening NTLM authentication Module 5: Attacks on Kerberos authentication: Execution and Mitigations a) Understanding and exploiting Kerberos b) Core concepts (tickets, keys, SPN) c) Authentication flow d) PKIinit e) Refreshing PAC f) Authentication Monitoring Module 6: Attacks against Kerberos tickets: Execution and Mitigations a) Pass-The-Ticket b) Silver ticket c) Golden ticket d)  Keberoasting DAY 4: Advanced attacks on Active Directory and Entra ID Module 7: Advanced AD Attacks: Execution and Mitigations a) DCSync b) DCShadow c) NGC/shadow credentials d) Advanced persistence techniques e) Skeleton Key f) Windows Hello for Business Security, g) AdminSDholder h) Offline access attacks i) Decrypting secrets with DPAPI and DPAPI-NG j) Attacks against smart card authentication Module 8: Azure and Entra ID pivoting a) Cloud enumeration b) On-prem to cloud pivoting c) Cloud to on-prem pivoting d) Entra ID security review e) Stealing Entra ID tokens f) Entra ID MFA and FIDO2 auditing g) Entra ID application security h) Catching signs of attack on-prem and in the Cloud DAY 5: Mastering Enterprise Exploitation, Post-Exploitation and Pivoting Module 9: Mastering Exploitation of Enterprise Services a) Exploiting PKI services b) Exploiting MSSQL Severs c) Exploiting IIS d) Exploiting ADFS e) Bypassing application whitelisting Module 10: Mastering Persistence and Lateral Movement a) Techniques for lateral movement recap b) BITS Jobs c) Boot or Login Autostart Execution d) Boot or Login Initialization Scripts e) Browser Extensions f) Compromising Software Binary g) Event-Triggered Execution h) External Remote Services i) Hijack Execution Flow j) Office Application Startup k) Scheduled Task/Job l) Server Software Component m) Traffic Signaling n) Persistence through Registry keys o) Malicious services p) Fileless malware
€3.500
Klassikaal
max 16

Masterclass: Introduction to Penetration Testing [IPT]

CQure Virtual English ma 7 dec. 2026
OVERVIEW During the course you will learn how to pick the right methodology for your project and acquire the skills on how to successfully perform target reconnaissance and get valuable data on the objective. We will go through various aspects of Web Application Pentesting and review the key concepts of web app security. We will also familiarize ourselves with Web Application pentester’s best friend: the Burp Suite. During the final stage of the training, we will guide you through various methods of infrastructure penetration testing. All exercises are based on Windows Server, Windows 10, and Kali Linux. This course is based on practical knowledge from tons of successful projects, many years of real-world experience and no mercy for misconfigurations or insecure solutions! After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible for CPE points! Virtual Learning This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins. OBJECTIVES Understand the fundamentals, methodologies, and phases of penetration testing Plan and execute structured penetration tests Understand web application architecture and common vulnerabilities Navigate Burp Suite for testing Understand common web attack techniques Perform scanning and enumeration of infrastructure services AUDIENCE - Penetration tester - Security analyst - IT administrator - Cybersecurity professional - A geek with IT background who wants to start an adventure in the cybersecurity pentesting field CERTIFICATION After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible for CPE points! CONTENT Module 1:  Introduction to Penetration Testing Module 2:  Performing security testing Module 3:  Reconnaissance Module 4:  Web Applications Module 5:  Introduction to Burp Suite Module 6:  Introduction to Web Attacks Module 7:  Infrastructure Penetration Testing Module 8:  Using and Creating Offensive Security Tools Module 9:  Security Solutions Module 10: Privilege Escalation Module 11: Lateral movement
€2.575
Klassikaal
max 16

Masterclass: Incident Response in the Cloud [IRC]

CQure Virtual English ma 30 nov. 2026
OVERVIEW This immersive training delivers a complete, hands-on journey through Azure security, identity abuse, threat detection, and cloud incident response. Students begin by establishing core foundations – Azure architecture, governance, logging, and the security stack, before progressing into the full Azure Cyber Kill Chain. Participants will perform real-world attacks across identity, compute, storage, and control-plane layers, including token theft, AiTM phishing, privilege escalation, service principal compromise, misconfigurations, and persistence techniques unique to Azure. Virtual Learning This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins. OBJECTIVES Understand Azure security and cloud incident response fundamentals. Detect, investigate, and respond to attacks targeting Azure, Entra ID, and hybrid environments. Analyze identity, infrastructure, and network-based threats in cloud environments. Use KQL, Microsoft Sentinel, and Graph API for threat hunting and incident investigation. Apply incident response processes aligned with the National Institute of Standards and Technology framework. Implement remediation, hardening, and cloud security best practices. Gain hands-on experience through practical labs and real-world attack scenarios. AUDIENCE The course is perfect for security architects, Entra ID administrators, security administrators, and security auditors. Enterprise administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security. CERTIFICATION After completing the course, participants will receive a CQURE Certificate of Completion and will also be eligible for CPE points. CONTENT Module One: Azure Security and Incident Response Fundamentals Module Two: Deep Dive into Entra ID and Governance Module Three: Core Controls, Benchmarks, and Logging Module Four: Reconnaissance and Initial Access Module Five: Infrastructure and Network Attacks Module Six: Execution and Privilege Escalation Module Seven: Advanced Identity Attacks and Credential Access Module Eight: Persistence Technique Module Nine: Exfiltration and Impact Module Ten: KQL for Incident Response Module Eleven: Advanced Hunting and Detection Module Twelve: Graph API for Incident Response Module Thirteen: Responding to Azure Attacks (NIST) Module Fourteen: Remediation and Strategic Hardening Module Fifteen: Advanced and Strategic Best Practices
€3.000
Klassikaal
max 16

Masterclass: Linux Security and Hardening (Advanced) [LXA]

CQure Virtual English do 12 nov. 2026
OVERVIEW This is a 2-day deep dive course on infrastructure services security, a must-go for enterprise administrators, security officers and architects. This advanced course expands on the concepts introduced in Linux Security and Hardening Basics and can be taken either as a follow-on to the foundational three-day program or as a standalone course. It focuses on advanced techniques for securing and hardening Linux systems through access control, isolation, and proactive threat detection. It is delivered by one of the best people in the market in the security field and what is more, this is an international Live Virtual Class so you will be able to share the learning experience with a group of IT pros from around the world without leaving your home or office! Virtual Learning This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins. OBJECTIVES Implement advanced Linux security and hardening techniques. Configure access control using ACLs, SELinux, and AppArmor. Apply kernel hardening and process isolation methods. Mitigate privilege escalation risks in Linux systems. Strengthen systems through proactive threat detection. AUDIENCE The course is perfect for enterprise administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security. CERTIFICATION After completing the course, participants will receive a CQURE Certificate of Completion and will also be eligible for CPE points. CONTENT Module 1: Mastering Discretionary Access Control (DAC) Module 2: Access Control Lists and Shared Directory Management Module 3: Implementing Mandatory Access Control with SELinux and AppArmor Module 4: Kernel Hardening and Process Isolation Module 5: Scanning, Auditing, and Hardening Module 6: Logging and Log Security Module 7: Vulnerability Scanning and Intrusion Detection Module 8: Prevent Unwanted Programs from Running
€2.275
Klassikaal
max 16

Masterclass: Malware Analysis & Reverse Engineering [MAR]

CQure Virtual English ma 30 nov. 2026
OVERVIEW This advanced, hands-on training is designed for cybersecurity professionals focused on incident response, malware analysis, and threat hunting.  Participants will gain a deep understanding of how advanced threats operate, how malware behaves, and how to analyze and respond to real-world attacks using modern tools and techniques. This course is based on practical knowledge from tons of successful projects, many years of real-world experience and no mercy for misconfigurations or insecure solutions All exercises are based on Windows Server, Windows 10, Kali Linux, and Ubuntu.  After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible for CPE points!   OBJECTIVES  Understand the lifecycle and tactics of Advanced Persistent Threats (APTs) Identify common attack vectors and malware delivery techniques Extract useful information using basic static analysis tools Leverage sandboxing tools to detect malicious activity Understand attack chains Understand fundamental assembly language concept Identify core malware capabilities Analyze encryption routines and key management AUDIENCE This course is designed for cybersecurity professionals who want to sharpen their skills in analyzing and defending against advanced threats. Whether you are a malware analyst, incident responder, threat hunter, SOC analyst, forensic specialist, security engineer, or red teamer CERTIFICATION After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible for CPE points! CONTENT Module 1:  APT Attacks & Malware Analysis Module 2:  Basic Static Analysis Module 3:  Behavioral Analysis & Sandboxing Module 4:  Spear-phishing Attacks with Malicious Documents Module 5:  Intro to x86/x64 Assembly Module 6:  Static & Dynamic Code Analysis Module 7:  Malware Functionalities Analysis  Module 8:  Unpacking Packed Samples Module 9:  Dealing with Encryption Module 10: Ransomware Analysis Module 11: Windows Forensics & Timeline Analysis Module 12: Advanced Techniques: Fileless Malware & API Hooking Module 13: Memory Forensics & Volatility Module 14: Reporting & Threat Hunting
€3.500
Klassikaal
max 16

Administer Windows Server [M-AZ802]

VIRTUAL TRAINING CENTER ma 7 dec. 2026 en 9 andere data
OVERVIEW AZ-802 equips IT professionals with the skills to deploy, manage, secure, monitor, and troubleshoot Windows Server environments across on-premises, cloud, and hybrid infrastructures.   The course covers Active Directory Domain Services (AD DS), networking, storage, virtualization, security, high availability, disaster recovery, workload migration, and hybrid management using Microsoft Azure and Windows Server administration tools. It is designed for administrators responsible for maintaining modern Windows Server environments and supporting business-critical workloads in hybrid IT environments.   Updated August 2026 OBJECTIVES After this course participants should be able to: Deploy and manage Active Directory Domain Services (AD DS). Manage Windows Server instances and workloads in hybrid environments. Deploy, configure, and administer virtual machines. Implement and manage on-premises and hybrid networking infrastructure. Manage storage and file services in Windows Server. Secure, monitor, and troubleshoot Windows Server environments. AUDIENCE This course is intended for Windows Server administrators who deploy, implement, manage, and troubleshoot Windows Server as a workload in on-premises, cloud, or hybrid environments. Candidates administer identity, security, compute, networking, storage, and monitoring for Windows Server, and they typically collaborate with architects, administrators, and engineers. Candidates should have experience administering Windows Server using technologies such as Windows Admin Center, Hyper-V, PowerShell, Azure Arc, Azure Monitor, Azure Update Manager, and Microsoft Defender for Cloud, and should be familiar with Active Directory Domain Services (AD DS). CERTIFICATION None NEXT STEP The following courses are recommended for further learning and development:  CONTENT Module 1: Deploy and manage Active Directory Domain Services Deploy and manage Active Directory Domain Services domain controllers Deploy and manage Azure IaaS Active Directory domain controllers in Azure Manage AD DS domain controllers and FSMO roles Create and manage Active Directory objects Implement hybrid identity with Windows Server Create and configure Group Policy Objects in Active Directory Implement Group Policy Objects Manage advanced features of AD DS Module 2: Manage Windows Server instances and workloads in a hybrid environment Administer and manage Windows Server IaaS Virtual Machine remotely Describe Windows Server administration tools Just Enough Administration in Windows Server Perform Windows Server secure administration Use advanced Windows PowerShell remoting techniques Manage single and multiple computers by using Windows PowerShell remoting Manage hybrid workloads with Azure Arc Manage Azure updates Automate the configuration of Windows Server IaaS Virtual Machines Enforce VM security configuration with Azure Machine Configuration Explore Azure Automation with DevOps Module 3: Manage virtual machines Configure and manage Hyper-V virtual machines Configure and manage Hyper-V Secure Hyper-V workloads Implement high availability of Windows Server VMs Plan and deploy Windows Server IaaS Virtual Machines Implement scale and high availability with Windows Server VM Implement Windows Server IaaS VM IP addressing and routing Implement Windows Server IaaS VM network security Administer and manage Windows Server IaaS Virtual Machine remotely Module 4: Implement and manage an on-premises and hybrid networking infrastructure Implement Windows Server DNS Implement DNS for Windows Server IaaS VMs Secure Windows Server DNS Deploy and manage DHCP Implement IP Address Management Implement Windows Server IaaS VM IP addressing and routing Module 5: Manage storage and file services Implement a hybrid file server infrastructure Manage Windows Server file servers Implement Storage Spaces and Storage Spaces Direct Implement Windows Server Data Deduplication Implement Windows Server iSCSI Implement Windows Server Storage Replica
€2.595
Klassikaal
max 16

Masterclass: M365 Security & M365 Copilot [MCO]

CQure Virtual English ma 14 dec. 2026
OVERVIEW This intensive training equips IT professionals with the skills to secure and harden their Microsoft 365 tenant using proven best practices. Participants learn how to implement a holistic Zero Trust security model, configure identity and access management, and protect users across cloud and mobile environments. The course delivers practical guidance to safeguard sensitive data while enabling secure collaboration and productivity. We’ll dive deeper into securing Microsoft 365 through robust administrative controls, data protection, and governance. Attendees gain hands-on insight into Microsoft Defender, Purview, secure guest access, and compliance strategies aligned with GDPR. The course empowers IT professionals to confidently protect complex cloud and hybrid environments at scale. We’ll introduce Copilot and Agents in Microsoft 365 securely, strategically, and with maximum business impact. Participants explore real-world use cases, technical architecture, governance models, and security frameworks required for a compliant AI rollout. The course ensures IT leaders can unlock AI-driven productivity while maintaining control, privacy, and trust. All exercises are based on M365 environment. This course is based on practical knowledge from tons of successful projects, many years of real-world experience and no mercy for misconfigurations or insecure solutions Virtual Learning This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins. OBJECTIVES Understand the core security architecture of Microsoft 365 Identify key security services and their roles Implement advanced threat protection capabilities Configure and optimize security policies for organizational needs Understand security and compliance requirements when deploying Copilot and AI agents Manage data protection, privacy, and access controls for AI-powered features  AUDIENCE The course is best suited for IT administrators, security engineers, and Microsoft 365 architects responsible for securing and managing cloud or hybrid environments. It is also ideal for IT managers, CISOs, and technical decision-makers who need to establish governance, compliance, and a secure foundation for advanced capabilities such as Copilot and Agents. CERTIFICATION After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible for CPE points! CONTENT Module 1: Security in Microsoft 365  Hybrid deployment of Entra ID and on premises Active Directory Active Directory synchronization Authentication methods and options Implementing and using Single Sign On Applying the Zero Trust security model Secure mobile authentication Integrating external guests Managing Microsoft 365 groups Enabling multi factor authentication Creating and managing Conditional Access policies Integrating applications with Entra ID Enrolling mobile devices and clients in Intune using Microsoft Managed Apps Module 2: Advanced Security in Microsoft 365 Secure configuration of the Microsoft 365 admin and Entra ID portals Security concepts for Named Admins Setting up break glass accounts Managing external guests in Microsoft Teams Governance and security Policies for data sharing and guest permission Deploying and configuring the Microsoft Defender suite Defender for Endpoint Defender for Microsoft 365 Defender for Servers Working with the Microsoft Purview portal Data protection and security in accordance with GDPR Best practices for integrating mobile devices Microsoft Intune and the Zero Trust approach Defining compliance and configuration policies Module 3: Securely Introducing Copilot and Agents in Microsoft 365 Inspiring introduction to Copilot and Agents for Microsoft 365 Optimizing workflows to fully leverage AI Identifying high impact use cases for your organization Empowering employees and preparing your helpdesk Comprehensive technical overview of Copilot and Agents In depth review of the underlying architecture Real-world benefits and opportunities with Copilot and Agents for Microsoft 365 Ensuring compliance: data protection & security Security frameworks, privacy policies, and regulatory fundamentals Defining roles, personas, and governance models Govern Copilot and Agents in Microsoft 365
€2.575
Klassikaal
max 16

Masterclass: PowerShell for Digital Investigation & Threat Hunting [PST]

CQure Virtual English di 8 dec. 2026
OVERVIEW This advanced course equips cybersecurity professionals with the skills to detect, investigate, and respond to modern threats using native Windows tools and PowerShell. With a strong focus on real-world attacker behaviors, participants will learn to identify Advanced Persistent Threats (APTs), analyze attack timelines, and uncover hidden or deleted artifacts using forensic techniques. PowerShell is used throughout the course as both a defensive and investigative tool, supporting artifact collection, process and network analysis, registry inspection, and script-based detection. Participants will explore common attacker techniques such as living-off-the-land binaries (LOLBins), scheduled tasks, and encoded payloads, and learn how to detect and counter them through logging, event analysis, and behavioral detection rules. Virtual Learning This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins. OBJECTIVES Investigate advanced persistent threats (APTs) using PowerShell and native Windows tools. Perform digital forensics and artifact collection for incident investigations. Analyze process, network, and registry artifacts to identify malicious activity. Implement PowerShell logging, detection, and threat hunting techniques. Conduct Active Directory enumeration and investigate fileless attacks. Apply real-world threat hunting and incident response techniques through hands-on exercises. AUDIENCE This course is designed for security professionals across offensive, defensive, and hybrid roles. Analysts, hunters, SOC teams, and incident responders will learn to enhance investigations with AI-driven workflows. Red and purple teamers will strengthen adversary emulation and detection validation, while engineers and developers gain hands-on experience building AI-powered tools, pipelines, and multi-agent systems. Security leaders and architects will benefit from practical insights into securing AI systems and addressing emerging vulnerabilities. CERTIFICATION After completing the course, participants will receive a CQURE Certificate of Completion and will also be eligible for CPE points. CONTENT Module 1: APT Attacks & Investigation Module 2: PowerShell 101 for Blue Teams Module 3: Understanding Information Gathering and Timelining Module 4: PowerShell for Digital Forensics & Artifact Collection Module 5: Process & Network Artifact Collection Module 6: PowerShell Logging & Detection Module 7: Threat Hunting with WMI & Scheduled Tasks Module 8: PowerShell for Enterprise Module 9: Hands-On Threat Hunting Case Study Module 10: Active Directory Enumeration with PowerShell Module 11: Red Teaming Tactics with PowerShell Module 12: Complete Fileless Attack Analysis Walkthrough
€3.000
Klassikaal
max 16

Masterclass: Red Team Tradecraft and Operations [RTO]

CQure Virtual English ma 16 nov. 2026 en 1 andere data
OVERVIEW Red Team Tradecraft and Operations is an intensive 3-day, 21-hour course focused on the professional execution and management of Red Team engagements. Unlike traditional penetration testing courses that focus primarily on how to hack, this course focuses on how to operate, covering strategic planning, infrastructure execution, operational security, collaboration, and reporting throughout the full lifecycle of a Red Team engagement. Participants will learn how to build and maintain resilient, secure, and automated Red Team infrastructure, define Rules of Engagement, select and configure Command & Control (C2) frameworks, apply operational security (OPSEC), translate threat intelligence into adversary emulation plans, coordinate multi-operator engagements, and produce high-value reports that communicate technical findings in terms of business impact.   Updated Auguts 2026 Virtueel en Klassikaal™ Virtueel en Klassikaal™ is een eenvoudig leerconcept en biedt een flexibele oplossing voor het volgen van een klassikale training. Met Virtueel en Klassikaal™ kunt u zelf beslissen of u een klassikale training virtueel (vanuit huis of kantoor )of fysiek op locatie wilt volgen. De keuze is aan u! Cursisten die virtueel deelnemen aan de training ontvangen voor aanvang van de training alle benodigde informatie om de training te kunnen volgen. OBJECTIVES By the end of the course, participants will be able to: Manage the end-to-end lifecycle of a Red Team operation, including scoping, deconfliction, and legal boundaries. Define effective Rules of Engagement (RoE) and identify critical assets or “Crown Jewels.” Translate Cyber Threat Intelligence (CTI) into actionable adversary emulation and simulation plans using MITRE ATT&CK. Design resilient, tiered Red Team infrastructure, including Team Servers, Redirectors, and Payload Servers. Deploy disposable Red Team infrastructure using Infrastructure as Code (IaC) and automation. Configure and manage Command & Control (C2) infrastructure and profiles. Configure redirectors and use techniques to mask the origin of attacks and blend traffic into normal organizational network traffic. Implement effective OPSEC workflows and secure team communication. Maintain accurate logging to support reconstruction of operational events. Coordinate multi-operator Red Team engagements. Translate technical findings into business-impact narratives and executive-level reporting. AUDIENCE This course is designed for: - Red Team Leads - Senior Penetration Testers transitioning to Red Teaming - Adversary Emulation Specialists - C2 Infrastructure Engineers - Security Managers overseeing offensive operations - Penetration Testers - Security Analysts - IT Administrators - Cybersecurity Professionals - IT professionals with a technical background who want to develop their skills in cybersecurity penetration testing CERTIFICATION Participants receive a CQURE lifelong certification upon successful completion of the course. NEXT STEP None CONTENT The Red Team Tradecraft and Operations (RTO) program consists of 18 expert-level modules delivered over 3 intensive days, combining strategic planning, infrastructure engineering, operational tradecraft, and reporting methodologies. This training focuses on the professional execution of Red Team engagements. Students will learn how to design resilient command-and-control infrastructure, manage operational security, translate threat intelligence into adversary emulation plans, coordinate multi-operator engagements, and deliver executive-level reporting that demonstrates real business impact. Day 1: Engagement Strategy & Infrastructure Engineering Module 1: The Red Team Framework: Red Teaming vs. Penetration Testing. Defining “Objectives Based” vs. “Scope Based” assessments. Module 2: Scoping, RoE & Legal: The art of the kick-off meeting. Defining Rules of Engagement (RoE), “Crown Jewels” identification, White Cards, and legal protections. Module 3: Threat Intelligence (CTI) & Emulation: Translating CTI reports into actionable Adversary Emulation/Simulation Plans using MITRE ATT&CK. Module 4: Infrastructure Architecture: Designing the Tiered Infrastructure Model (Team Servers, Redirectors, Payload Servers) for non-attribution. Module 5: Automation (DevSecOps): Hands-on automated deployment of disposable infrastructure. Automating SMTP relays, phishing servers, C2 nodes etc.. Module 6: Traffic Management: Configuring Redirectors (Nginx/Socat) and utilizing CDNs/Domain Fronting to mask the origin of attacks. Using ExternalC2 to blend into the common organization network traffic. Day 2: Comand, Control & Operational Tradecraft Module 7: C2 Framework Selection: Comparative analysis of modern frameworks and selection strategy based on operation goals. Module 8: Traffic Engineering: Customizing traffic signatures (Malleable C2/Profiles) to blend with legitimate network traffic (jitter, sleep, user-agent spoofing). Using application-related external C2 channels. Module 9: Communication Channels: Deep dive into HTTP/S, DNS, and SMB piping. Understanding “Beaconing” heuristics and detection logic. Module 10: Team Collaboration: Managing shared sessions, operator logs, and deconfliction servers to avoid “Red-on-Red” issues. Module 11: Initial Access Strategy: Planning the delivery vector (Physical vs. Phishing vs. Assumed Breach). Tracking payload execution rates and landing success. Module 12: OPSEC & “Silence”: Managing “Time on Target” and noise levels. Decision-making matrices for when to use active scanning vs. passive enumeration. Day 3: Execution Management, Analysis & Reporting Module 13: Persistence Strategy: Long-term access management. Differentiating between “Interactive Access” (high noise) and “Sleepy Agents” (low noise). Module 14: The “Assume Breach” Execution: Methodologies for internal-only engagements and lateral movement discipline (avoiding event log spikes). Module 15: Logging & Reconstruction: Aggregating operator logs (ELK/Splunk). Correlating Red Team actions with Blue Team alerts for the debrief. Module 16: The Red Team Report: Structuring the strategic report. Writing Executive Summaries, visualizing Attack Graphs, and defining Business Impact. Module 17: Purple Teaming & Remediation: Transitioning from attack to defense. Delivering constructive feedback and verifying fixes. Module 18: Capstone Workshop: Students design a complete Operation Plan for a fictional client, including Infrastructure design, CTI selection, RoE drafting, and Reporting structure.
€2.575
Klassikaal
max 16