CATALOGUECOURSESCertified Red Team Professional (CRTP)
    Cyber Security Certification
    [ cyber ]
    BODY: Altered Security

    "The Certified Red Team Professional, or CRTP, is a rigorous offensive security certification that trains professionals in Active Directory exploitation and assumed-breach scenarios. Utilizing native Windows tools and PowerShell, candidates learn to execute sophisticated lateral movement, privilege escalation, and persistence tactics. This certification is highly valued in the cybersecurity industry for developing practical, hands-on red teaming skills that directly translate to defending enterprise networks against advanced persistent threats."

    The Certified Red Team Professional (CRTP) is a highly specialized, hands-on offensive security certification designed by Altered Security. It focuses exclusively on assessing and exploiting Active Directory (AD) environments using native Windows tools, PowerShell, and advanced attack methodologies. The course trains cybersecurity professionals to operate from an assumed breach perspective, simulating advanced threat adversaries to uncover complex misconfigurations. Students will master domain enumeration, local privilege escalation, lateral movement, cross-trust attacks, and persistence mechanisms without relying on automated exploit frameworks. This clinical training ensures graduates can identify critical infrastructure vulnerabilities and provide actionable remediation strategies for enterprise networks.

    Certifying BodyAltered SecurityAccreditation Authority
    Estimated Time24 HoursRecommended Preparation
    Skills Tested5 CompetenciesAtomic Units Mapped
    SecNav Verification
    Active Audit Node
    Simulation Ready

    [01] Hands-On Verification Sandboxes (Live Simulations)

    Deploy into hands-on sandbox simulations mapped directly to Certified Red Team Professional (CRTP) objectives. Verify your readiness under real-world conditions:

    Verification Available

    Parallax Edge Penetration Assessment

    ID: SECM-1109Deploy
    Verification Available

    Operation Helix Frost: Insider Threat Simulation

    ID: SECM-4940Deploy
    Verification Available

    APT Containment: Logistics Pivot

    ID: SECM-9832Deploy

    [ EDITORIAL_INDEPENDENCE_NOTICE ]

    SecNav is not a commercial partner for this course. We do not receive compensation, referral commissions, or affiliate fees from Altered Security for indexing this credential. We map this path purely for its educational merit and alignment with career progression.

    PROVIDER_INTEL

    [02] Exam Curriculum & Syllabus Modules

    5 Modules Indexed

    Structured domain syllabus and core learning outcomes covered in the Certified Red Team Professional (CRTP) examination blueprint:

    MODULE // 01
    ~4h

    Module 1: Active Directory Enumeration & Reconnaissance

    • •Domain architecture and concepts
    • •PowerView and ADModule usage
    • •User, Group, and Computer enumeration
    • •BloodHound mapping and SPN scanning
    MODULE // 02
    ~5h

    Module 2: Local Privilege Escalation & Credential Extraction

    • •Bypassing local restrictions and AppLocker
    • •Mimikatz execution and credential dumping
    • •LAPS (Local Administrator Password Solution) exploitation
    • •Token impersonation techniques
    MODULE // 03
    ~6h

    Module 3: Lateral Movement & Domain Privilege Escalation

    • •Pass-the-Hash and Overpass-the-Hash
    • •Kerberoasting and AS-REP Roasting
    • •Abusing Kerberos delegations (Unconstrained, Constrained, Resource-Based)
    • •Executing BloodHound attack paths
    MODULE // 04
    ~5h

    Module 4: Cross-Trust Attacks & Forest Compromise

    • •Domain trust mapping and enumeration
    • •Golden Ticket and Silver Ticket attacks
    • •Forging Inter-Realm TGTs
    • •Trust key extraction and exploitation
    MODULE // 05
    ~4h

    Module 5: Persistence & Defense Evasion

    • •DCSync attacks and NTDS.dit extraction
    • •AdminSDHolder and SDProp modifications
    • •Skeleton Key injections
    • •AMSI bypass techniques for PowerShell

    [03] Skills Validated by This Certification

    The Certified Red Team Professional (CRTP) curriculum tests and measures critical capabilities across these essential cybersecurity & threat defense skills. Explore the dedicated skills nodes below:

    Active Directory Exploitation

    cyber

    PowerShell for Security (Offense)

    cyber

    Internal Network Pivoting

    cyber

    Evasion Techniques (AV/EDR)

    cyber

    Network Penetration Testing

    cyber

    [04] Career Pathways & Target Roles

    Securing a verified status in Certified Red Team Professional (CRTP) is a high-value accelerator for major cyber defense career paths. Learn more about the primary roles mapping to this pathway:

    Red Team Operator

    Verified Target Role

    Red Team Lead

    Verified Target Role

    Junior Penetration Tester

    Verified Target Role

    Network Penetration Tester

    Verified Target Role

    Endpoint Security Engineer

    Verified Target Role

    Cloud Penetration Tester

    Verified Target Role

    Malware Analyst

    Verified Target Role

    Exploit Developer / Researcher

    Verified Target Role

    [05] Frequently Asked Questions about Certified Red Team Professional (CRTP)

    Yes, absolutely! You can verify your real-world readiness by launching the following active-threat sandbox simulations on our platform: Parallax Edge Penetration Assessment, Operation Helix Frost: Insider Threat Simulation, APT Containment: Logistics Pivot. Completing these sandboxes grants cryptographically signed proof and reward XP.
    Students should have a foundational understanding of Active Directory architecture, basic Windows command-line and PowerShell usage, and general networking concepts. Prior penetration testing experience is beneficial but not strictly required, as the course builds up from fundamental enumeration techniques.
    No, the CRTP methodology heavily emphasizes 'living off the land.' Students are taught to identify and exploit architectural misconfigurations and abuse native features using PowerShell and built-in Windows tools, rather than relying on automated frameworks like Metasploit.
    The CRTP exam is a fully practical, 24-hour hands-on assessment where candidates must compromise a simulated Active Directory forest. Following the practical lab, candidates have an additional 48 hours to submit a comprehensive, professional-grade penetration testing report detailing their attack paths and remediation strategies.

    [06] Authoritative Sources & Certification References

    Certifying Body & Official Resources

    Official Registration URLDirect Link
    https://www.alteredsecurity.com/
    MITRE ATT&CK ReferenceTA0008 Lateral Movement
    Official Link
    NIST SP Reference800-115
    Official Link