Certifications

A certificate holder has demonstrated the understanding of Network and Infrastructure security of an Enterprise environment. They understand and have hands-on capability to execute attack techniques like Linux and Windows privilege escalation, pivoting and tunnelling, AD CS abuse, Looting Windows Machines, antivirus evasion, and more for a large network.

A CRTM® holder is a master in enterprise AD security. They have the ability to identify, exploit, demonstrate and fix security issues in an enterprise. They have demonstrated the ability to understand and secure the modern enterprise network by executing a silent red team operation starting from a beachhead leading to compromise of multiple forests.​​

A Certified by Altered Security Red Team Professional for Azure (CARTP®) holder has demonstrated the skills to understand and assess security of an Azure environment. A certificate holder would have practical knowledge of assessing security of Azure infrastructure of an enterprise spread across multiple tenants and hybrid identity.

​

A certificate holder has demonstrated the understanding of AD security. They can identify and enumerate interesting information and execute variety of attack techniques like local & domain privilege escalation, persistence, trust abuse & antivirus evasion with minimal chances of detection.

​​

​

A CETP certificate holder has demonstrated a deep understanding of Windows internals and the techniques required to bypass advanced detection mechanisms. They are equipped to reverse-engineer EDR solutions, identify and exploit vulnerabilities in order to weaponize them for evasion purposes.​​​​​​

​

​

A Certified by Altered Security Red Team Expert for Azure (CARTE®) certificate holder has demonstrated expertise in running a red team operation against a highly secure enterprise-like Azure environment with focus on opsec and evading detection. They can assess security controls, analyze their efficacy & recommend mitigations against misconfigurations.​​​

A certificate holder has demonstrated an expert level understanding of red team and enterprise security. They can customize open source tools and can abuse other built-in tools to perform enumeration, local privileges escalation, impersonation, pivoting, allowlisting bypasses as well as identify sensitive data in a highly secure environment.

​

A certificate holder has demonstrated the understanding of AD CS security. They can execute attacks against an enterprise environment containing AD CS. They are ready to integrate AD CS attacks in their TTPs and attack methodology.​​​​​​​​​

​

A certificate holder has demonstrated the skills to assess and secure enterprise AI systems and identities across Microsoft 365, Azure and Entra ID. They can understand AI architecture, agent identity issues, expanded attack surface and perform attacks like prompt injection, RAG manipulation, inter-agent flow hijacking, and lateral movement across cloud and hybrid environments.