Skills

Study notes

• Red Team Engagementslearning

  Core ideas for planning and executing an authorized red-team engagement.

  red-team · adversary-emulation · engagement-planning · threat-intelligence

• Malware Essentials for Windows Payloadslearning

  A practical mental model for Windows PE files, processes, threads, memory, and payload execution.

  red-team · windows · malware · pe · process-injection

• Cobalt Strike Primerlearning

  A mental model for Cobalt Strike's architecture, listeners, Beacon payloads, staging, and operator interaction.

  cybersecurity · offensive-security · red-team · cobalt-strike · crto

• AV and EDR Defence Evasionlearning

  A practical mental model for understanding how AV and EDR observe payloads, memory, process injection, scripts, and post-exploitation behavior in an authorized lab.

  cybersecurity · offensive-security · red-team · cobalt-strike · crto

• Initial Accesslearning

  CRTO study notes on phishing taxonomies, payloads, triggers, containers, and initial-access delivery methods.

  red-team · crto · initial-access · phishing · payloads · delivery

• Persistencelearning

  CRTO study notes on Windows persistence through autostart locations, logon scripts, PowerShell profiles, scheduled tasks, and COM hijacking.

  red-team · crto · persistence · windows · registry · scheduled-tasks · com

• Post-Exploitationlearning

  A practical model for post-exploitation situational awareness, Beacon execution choices, session passing, collection, and PowerShell execution in an authorized CRTO lab.

  cybersecurity · red-team · crto · post-exploitation

• Privilege Escalationlearning

  A practical model for assessing Windows privilege boundaries and identifying authorized-lab escalation paths through services, execution hijacking, software vulnerabilities, and UAC.

  cybersecurity · red-team · crto · privilege-escalation · windows