OM-320
Red Team Operations
Plan and run red team exercises that improve defence.
A course for experienced testers moving into red teaming. You learn how objective-based exercises are planned, run safely against a monitored enterprise lab and debriefed so the blue team gets measurably better.
- 130 hours
- Study time
- 90 days
- Lab access
- 40
- Lab machines
- 4
- Formats
Outcomes
What you will be able to do
Learning outcomes you can point to in your work.
- Plan an exercise around realistic threat scenarios
- Operate safely within agreed rules of engagement
- Understand enterprise identity and infrastructure
- Collaborate with detection and response teams
- Deliver executive and technical debriefs
Syllabus
6 modules, 40 guided exercises
Module titles and topics are shown here. Full lessons and lab exercises open when you enrol.
Module 1: Red teaming in context
- Red, blue and purple
- Threat intelligence
- Exercise objectives
4 exercises
Module 2: Planning and safety
- Rules of engagement
- Deconfliction
- Risk management
4 exercises
Module 3: Infrastructure
- Lab infrastructure design
- Operational hygiene
- Logging your own activity
8 exercises
Module 4: Enterprise environments
- Identity at scale
- Cloud-connected directories
- Trust relationships
12 exercises
Module 5: Working with defenders
- Detection engineering basics
- Purple team sessions
- Measuring coverage
8 exercises
Module 6: Debrief and reporting
- Attack narratives
- Detection gaps
- Improvement roadmaps
4 exercises
Prerequisites
Before you begin
- OMCP or equivalent experience
- Familiarity with enterprise Windows networks
What is included
Everything in the course
- Video lessons
- Written course guide
- Enterprise lab
- Exam simulator
- 90 days of lab access
- 40 lab machines
The credential
Prepare for OMRE
This course is the preparation for the OffensiveMind Red Team Expert exam. Finish the course, practise in the labs and sit the proctored practical when you are ready.
OMRE
OffensiveMind Red Team Expert
Adversary emulation that makes defenders stronger.
View credential