Penetration Testing: Evasion

What about this course?

<br>The majority of organizations base their defenses in multiple security solutions. During an engagement, a red team member may come across multiple defense layers, from IDS/IPS and firewalls all the way to network segmentation, A/V, EDR, Sysmon, ETW and HIDS solutions. In this course you will be shown how to move around such defenses as well as the common pitfalls in a red team member’s tradecraft. Removing hooks placed by A/Vs or EDRs, bypassing ETW, evading Sysmon, advanced AMSI patching and executing assemblies in memory are only a subset of what you will be taught during this course.</br> <br>This course is part of the Advanced Penetration Testing Learning path which prepares you for the eCPTXv2 exam and certification</br>