امنیت سازمانی (Red Team)، مخصوص مدیران و کارشناسان فناوری اطلاعات سازمان ها

2- Password Spraying Outlook Web Access

3- Phishing with MS Office

a. Word

b. Excel

c. Pdf

4- Forced Authentication

5- NetNTLMv2 hash stealing using Outlook Chapter

2 – Code Execution :

1- regsvr32

2- MSHTA

3- Control Panel Item

4- CMSTP

5- Using MSBuild to Execute Shellcode in C#

6- Powershell Without Powershell.exe Chapter

3 – Defense Evasion :

1- What is Defense Evasion?

2- AV Bypass with Metasploit Templates and Custom Binaries

3- Obfuscated Powershell

4- Packed Binaries

5- Hidden Files

6- Encode/Decode Data with Certutil

7- Alternate Data Streams Chapter

4 – Enumeration and Discovery :

1- What is Enumeration and Discovery?

2- Dump GAL from OWA

3- Application Window Discovery

4- Using COM to Enumerate Hostname, Username, Domain

5- Account Discovery & Enumeration

6- Detecting Sysmon on the Victim Host

7- What Is COM? Enumerating COM Objects Chapter

5 – Credential Access & Dumping :

1- What is Credential Access & Dumping?

2- Dumping Credentials from Lsass Process Memory with Mimikatz

3- Dumping Hashes from SAM via Registry

4- Dumping LSA Secrets

5- Dumping SAM via esentutl.exe

6- Dumping and Cracking mscash

7- Credentials in Registry Chapter

6 – Lateral Movement :

1- What is Lateral Movement?

2- WinRM for Lateral Movement

3- WMI for Lateral Movement

4- Shared Webroot

5- Lateral Movement via Service Configuration Manager Chapter

7 – Persistence :

1- What is Persistence?

2- Office Templates

3- COM Hijacking

4- Task scheduler

5- Windows Registers