<commit_before>---
layout: post
title: "Certified Red Team Operator (CRTO) Course Review"
subtitle: "Certified Red Team Operator (CRTO) Course Review"
date: 2020-09-10
author: V3ded
category: Misc
tags: blog
finished: true
excerpt_separator: <!--more-->
---

# Preface

The [Red Team Ops (RTO)](https://www.zeropointsecurity.co.uk/red-team-ops){:target="_blank"} course and its corresponding certification, Certified Red Team Operator (CRTO), is relatively new to the security industry. It is developed and maintained by a well known Infosec contributor [RastaMouse](https://twitter.com/_rastamouse){:target="_blank"}. The course teaches you about the basic principles, tools, and techniques that are involved within the red teaming tradecraft, and is aimed towards both red teaming enthusiasts and professionals alike. <!--more--> As of last week (29.08.2020), I have successfully completed this course and finished the exam with enough flags to pass. Being done with the certification, I feel it's only adequate I write about my personal experiences throughout my two month journey.

> Disclaimer: With the course being still in its "early" stages, everything in this review may be a subject to change. This review represents the course in a period from the start of July to the end of August 2020.

<img class="centerImgTiny" src="/img/blog/crto-review/crto-review-01.png">

***

# Table of Contents

<a href="#preface">0. Preface</a><br>

<a href="#rto-requirements">1. RTO Requirements</a><br>

<a style="margin-left: 2rem;" href="#--knowledge">1.1. Knowledge</a><br>

<a style="margin-left: 2rem;" href="#--hardware">1.2. Hardware</a><br>

<a href="#what-to-expect-">2. What to expect ?</a><br>

<a style="margin-left: 2rem;" href="#--rto-course">2.2. RTO Course</a><br>

<a style="margin-left: 2rem;" href="#--rto-exam">2.3. RTO Exam</a><br>

<a href="#my-thoughts-on-rto">3. My Thoughts On RTO</a><br>

<a style="margin-left: 2rem;" href="#--covenant-vs-cobalt-strike">3.1. Covenant vs Cobalt Strike</a><br>

<a style="margin-left: 4rem;" href="#--covenant">3.1.1. Covenant</a><br>

<a style="margin-left: 4rem;" href="#--cobalt-strike">3.1.2. Cobalt Strike</a><br>

<a style="margin-left: 4rem;" href="#--more-on-covenant">3.1.3. More on Covenant</a><br>

<a style="margin-left: 2rem;" href="#--course-materials--lab-environment">3.2. Course Materials & Lab Environment</a><br>

<a style="margin-left: 4rem;" href="#--course-materials">3.2.1. Course Materials</a><br>

<a style="margin-left: 4rem;" href="#--lab-environment">3.2.2. Lab Environment</a><br>

<a style="margin-left: 4rem;" href="#--misc">3.2.3. Misc</a><br>

<a style="margin-left: 2rem;" href="#--the-exam">3.3. The Exam</a><br>

<a style="margin-left: 4rem;" href="#--exam-preparation">3.3.1. Exam Preparation</a><br>

<a href="#kudos">4. Kudos</a><br>

<a href="#conclusion">5. Conclusion</a><br>

***

# RTO Requirements

### - Knowledge

There are no existing requirements which limit who can and can't enroll into the RTO course. Knowledge-wise it is recommended to have a fair understanding of networking protocols and programming (ideally C#). 

Fear you don't have what it takes but still want to take a crack at the course? Worry not, because as RastaMouse said, "the most successful students are not those with the greater technical knowledge - but those with a passion for learning new skills". And he couldn't be more right. If you feel like this is something you would enjoy, then sign up and see for yourself. Taking risks is a part of life after all :).

### - Hardware

When it comes to hardware, any computer in the standard price range should do the trick. Just make sure you can allocate at least 6GB of RAM and around 200GB of disk space for two virtual machines. The exact configuration can be found below:

<a href="/img/blog/crto-review/crto-review-02.png" target="_blank"><img class="centerImgLarge" src="/img/blog/crto-review/crto-review-02.png"></a>

> Note: The disk space of both VMs adds up to 120GB instead of 200GB, but I strongly recommend you leave some space for snapshots. Rather safe then sorry.

***

# What To Expect ?

You can find out more about this course on its official page [here](https://www.zeropointsecurity.co.uk/red-team-ops){:target="_blank"}. However with this post being a review, I will try my best to summarize both the course and the exam itself in my own words.

### - RTO Course

RTO is a practical course. With its purchase you get access to a full-fledged Active Directory lab environment for either 30, 60 or 90 days, depending on what you chose when signing up. You also get access to an RTO Slack channel and learning materials in an "e-learn" like format on an online learning platform called Canvas.

<figure>

<a href="/img/blog/crto-review/crto-review-03.png" target="_blank"> <img class="centerImgHuge" src="/img/blog/crto-review/crto-review-03.png"></a>

<figcaption>The Canvas Platform (Image posted with permission from RastaMouse)</figcaption>

</figure>

Now unlike the OSCP and some other training courses, you do **not** receive a PDF. 
It is also important to mention that access to Canvas or Slack doesn't expire (whereas your lab access does). You will have lifetime access to the course and its subsequent upgrades without any additional payments.

> Quote from RTO: *RTO is a “rolling course” - which means the materials are never static. As tools, techniques and the threat landscape evolves, so too does RTO. Updates are provided incrementally rather than waiting for “big-bang” v2/v3 releases.*

At the time of writing this, the materials are divided into multiple chapters mostly in written form, with a few videos in between each chapter. The associated chapters are listed below (read from top to bottom, left to right):

<ul style="padding-left: 13%; column-count: 2;"> <!-- style="height:100px; display:flex; flex-direction: column; flex-wrap: wrap; column-count: 6" -->

<li>Introduction to Red Teaming</li>

<li>External Reconnaissance</li>

<li>Initial Compromise</li>

<li>Host Reconnaissance</li>

<li>Persistence</li>

<li>Local Privilege Escalation</li>

<li>Domain Reconnaissance</li>

<li>Credentials & User Impersonation</li>

<li>Password Cracking (added 16/09/2020)</li><commit_msg>Formatting.<commit_after>---
layout: post
title: "Certified Red Team Operator (CRTO) Course Review"
subtitle: "Certified Red Team Operator (CRTO) Course Review"
date: 2020-09-10
author: V3ded
category: Misc
tags: blog
finished: true
excerpt_separator: <!--more-->
---

# Preface

The [Red Team Ops (RTO)](https://www.zeropointsecurity.co.uk/red-team-ops){:target="_blank"} course and its corresponding certification, Certified Red Team Operator (CRTO), is relatively new to the security industry. It is developed and maintained by a well known Infosec contributor [RastaMouse](https://twitter.com/_rastamouse){:target="_blank"}. The course teaches you about the basic principles, tools, and techniques that are involved within the red teaming tradecraft, and is aimed towards both red teaming enthusiasts and professionals alike. <!--more--> As of last week (29.08.2020), I have successfully completed this course and finished the exam with enough flags to pass. Being done with the certification, I feel it's only adequate I write about my personal experiences throughout my two month journey.

> Disclaimer: With the course being still in its "early" stages, everything in this review may be a subject to change. This review represents the course in a period from the start of July to the end of August 2020.

<img class="centerImgTiny" src="/img/blog/crto-review/crto-review-01.png">

***

# Table of Contents

<a href="#preface">0. Preface</a><br>

<a href="#rto-requirements">1. RTO Requirements</a><br>

<a style="margin-left: 2rem;" href="#--knowledge">1.1. Knowledge</a><br>

<a style="margin-left: 2rem;" href="#--hardware">1.2. Hardware</a><br>

<a href="#what-to-expect-">2. What to expect ?</a><br>

<a style="margin-left: 2rem;" href="#--rto-course">2.2. RTO Course</a><br>

<a style="margin-left: 2rem;" href="#--rto-exam">2.3. RTO Exam</a><br>

<a href="#my-thoughts-on-rto">3. My Thoughts On RTO</a><br>

<a style="margin-left: 2rem;" href="#--covenant-vs-cobalt-strike">3.1. Covenant vs Cobalt Strike</a><br>

<a style="margin-left: 4rem;" href="#--covenant">3.1.1. Covenant</a><br>

<a style="margin-left: 4rem;" href="#--cobalt-strike">3.1.2. Cobalt Strike</a><br>

<a style="margin-left: 4rem;" href="#--more-on-covenant">3.1.3. More on Covenant</a><br>

<a style="margin-left: 2rem;" href="#--course-materials--lab-environment">3.2. Course Materials & Lab Environment</a><br>

<a style="margin-left: 4rem;" href="#--course-materials">3.2.1. Course Materials</a><br>

<a style="margin-left: 4rem;" href="#--lab-environment">3.2.2. Lab Environment</a><br>

<a style="margin-left: 4rem;" href="#--misc">3.2.3. Misc</a><br>

<a style="margin-left: 2rem;" href="#--the-exam">3.3. The Exam</a><br>

<a style="margin-left: 4rem;" href="#--exam-preparation">3.3.1. Exam Preparation</a><br>

<a href="#kudos">4. Kudos</a><br>

<a href="#conclusion">5. Conclusion</a><br>

***

# RTO Requirements

### - Knowledge

There are no existing requirements which limit who can and can't enroll into the RTO course. Knowledge-wise it is recommended to have a fair understanding of networking protocols and programming (ideally C#). 

Fear you don't have what it takes but still want to take a crack at the course? Worry not, because as RastaMouse said, "the most successful students are not those with the greater technical knowledge - but those with a passion for learning new skills". And he couldn't be more right. If you feel like this is something you would enjoy, then sign up and see for yourself. Taking risks is a part of life after all :).

### - Hardware

When it comes to hardware, any computer in the standard price range should do the trick. Just make sure you can allocate at least 6GB of RAM and around 200GB of disk space for two virtual machines. The exact configuration can be found below:

<a href="/img/blog/crto-review/crto-review-02.png" target="_blank"><img class="centerImgLarge" src="/img/blog/crto-review/crto-review-02.png"></a>

> Note: The disk space of both VMs adds up to 120GB instead of 200GB, but I strongly recommend you leave some space for snapshots. Rather safe then sorry.

***

# What To Expect ?

You can find out more about this course on its official page [here](https://www.zeropointsecurity.co.uk/red-team-ops){:target="_blank"}. However with this post being a review, I will try my best to summarize both the course and the exam itself in my own words.

### - RTO Course

RTO is a practical course. With its purchase you get access to a full-fledged Active Directory lab environment for either 30, 60 or 90 days, depending on what you chose when signing up. You also get access to an RTO Slack channel and learning materials in an "e-learn" like format on an online learning platform called Canvas.

<figure>

<a href="/img/blog/crto-review/crto-review-03.png" target="_blank"> <img class="centerImgHuge" src="/img/blog/crto-review/crto-review-03.png"></a>

<figcaption>The Canvas Platform (Image posted with permission from RastaMouse)</figcaption>

</figure>

Now unlike the OSCP and some other training courses, you do **not** receive a PDF. 

Additionally, it is important to mention that access to Canvas or Slack doesn't expire (whereas your lab access does). You will have lifetime access to the course and its subsequent upgrades without any additional payments.

> Quote from RTO: *RTO is a “rolling course” - which means the materials are never static. As tools, techniques and the threat landscape evolves, so too does RTO. Updates are provided incrementally rather than waiting for “big-bang” v2/v3 releases.*

At the time of writing this, the materials are divided into multiple chapters mostly in written form, with a few videos in between each chapter. The associated chapters are listed below (read from top to bottom, left to right):

<ul style="padding-left: 13%; column-count: 2;"> <!-- style="height:100px; display:flex; flex-direction: column; flex-wrap: wrap; column-count: 6" -->

<li>Introduction to Red Teaming</li>

<li>External Reconnaissance</li>

<li>Initial Compromise</li>

<li>Host Reconnaissance</li>

<li>Persistence</li>

<li>Local Privilege Escalation</li>

<li>Domain Reconnaissance</li>

<li>Credentials & User Impersonation</li>

<li>Password Cracking (added 16/09/2020)</li>
{'fraction_non_alphanumeric': 0.12891373801916933, 'fraction_numerical': 0.01900958466453674, 'mean_word_length': 4.6223619218679834, 'pattern_counts': {'":': 0, '<': 189, '<?xml version=': 0, '>': 195, 'https://': 6, 'lorem ipsum': 0, 'www.': 4, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5217373', 'n_tokens_mistral': 3994, 'n_tokens_neox': 3773, 'n_words': 1523}