reaper@re4perz3d:~$

reaper@re4perz3d:~/certs$ cat crtp.md

CRTP — Certified Red Team Professional

[red] Altered Security July 2026

CRTP — Certified Red Team Professional certificate

CRTP is a practical Active Directory certification. Everything happens inside a live multi-domain Windows environment, so the learning is by doing, not by memorising.

What I learned

  • Enumerating a domain with PowerView and BloodHound: users, groups, ACLs, trusts and the shortest path to a privileged account.
  • Privilege escalation locally and across the domain, including Kerberos abuse such as Kerberoasting and delegation.
  • Lateral movement and persistence with Rubeus, Mimikatz and Impacket, and what each technique leaves behind.
  • Trusts and forests: moving between domains and across a forest, and why controls like SID filtering matter.
  • Working around defenses such as AMSI and restricted PowerShell, and reading the detection side of every attack.

Why it matters to my work

I work in a SOC, so the most valuable part was seeing each attack from both sides: how it is executed, then which Windows events and telemetry it produces. That is the attack → detect loop I try to practise, and it is the idea behind my Active Directory cheat sheet.

$ verify --credential

Verify credential →