Cyber Defence
CYBERDEFENCE
Objective-driven adversary simulation — Active Directory, C2, evasion basics and a report defenders can use. · Live online across Punjab

Red Team Course in Punjab

Red teaming simulates a specific, goal-driven adversary instead of scanning for every possible bug. This track covers designing an engagement around an objective, initial access through phishing and exposed services, Active Directory attack paths, credential abuse, lateral movement, command-and-control infrastructure, operational security, and a report that improves detection rather than listing vulnerabilities.

Last updated: 6 August 2026

Book a free counselling call +91 75175 72000

What this track will not do for you

Red team roles in India rarely hire freshers — most operators arrive after three to five years of pentesting, SOC or infrastructure work. This track gives you methodology and lab hours, not seniority. We also do not supply commercial C2 licences, production-ready EDR bypasses, or anything intended for use outside an authorised engagement.

Who this is for

For working pentesters, senior SOC engineers and Windows administrators who already understand domains and want the adversary-simulation layer on top. Not for freshers: without prior hands-on testing or infrastructure experience most of this becomes memorised commands, and interviewers detect that within a few questions.

Prerequisites: Real comfort with Windows Server and Active Directory — users, groups, GPO, and Kerberos at least conceptually — plus solid networking, prior penetration testing exposure, and PowerShell or Python scripting. You also need hardware for a small multi-VM domain lab; 16GB RAM is the floor and 32GB is far more comfortable.

The picture in Punjab

Ludhiana runs hosiery, knitwear, bicycles, auto components and machine tools on a very dense registered MSME base. Jalandhar makes sports goods and hand tools sold to buyers in dozens of countries. Amritsar handles textiles, shawls, basmati rice and religious tourism around the Golden Temple. Wheat and paddy farming, agri-machinery dealerships and grain trade hold the rest together, while Mohali adds IT and pharma.

Punjabi households are heavily connected and strongly NRI-linked, so buying decisions often involve relatives in Canada, the UK or Australia. Small manufacturers already maintain IndiaMART and Alibaba listings, and family firms negotiate orders on WhatsApp rather than email. Punjabi-language YouTube and Instagram reach farmers and small traders faster than any website does. Card and UPI acceptance is routine even in tehsil towns.

Sectors hiring for this in Punjab

Hosiery, knitwear and textilesBicycles, auto components and machine toolsSports goods and hand toolsAgriculture and agri-machineryImmigration and study-abroad servicesFood processing

Main centres: Ludhiana · Amritsar · Jalandhar · Patiala · Bathinda · Mohali

Red Team Course syllabus

12 weeks · 70 hours (live online, or at the Hisar campus). Every module is hands-on — you work on your own machine from Punjab, never against systems you do not own.

01. Designing the engagement

  • Objective-based testing versus vulnerability assessment
  • Rules of engagement, authorisation and deconfliction
  • Threat-model driven scenarios and adversary emulation plans
  • White cell coordination and blue team communication
  • Where purple teaming delivers more value than stealth

02. Initial access

  • OSINT, employee mapping and credential exposure research
  • Phishing pretexts, infrastructure and payload delivery
  • Malicious documents, LNK and container file lures
  • Password spraying against portals without lockouts
  • Exposed VPN, Citrix, OWA and forgotten external services

03. Active Directory attack paths

  • Enumeration with SharpHound and analysis in BloodHound
  • Kerberoasting and AS-REP roasting in practice
  • ACL and object permission abuse chains
  • Unconstrained and constrained delegation issues
  • Domain and forest trust paths

04. Credentials and lateral movement

  • Credential material on Windows hosts and safe handling of it
  • Pass-the-hash and pass-the-ticket concepts
  • Movement over SMB, WMI, WinRM and scheduled tasks
  • Session hunting toward privileged users
  • Privilege escalation on Windows and Linux hosts

05. C2 and evasion fundamentals

  • Command-and-control architecture, redirectors and domain fronting concepts
  • Beacon profiles, sleep, jitter and traffic shaping
  • Operational security discipline during an engagement
  • What Sysmon and EDR telemetry actually record
  • Living-off-the-land binaries and why they are noisy too

06. Reporting for defenders

  • Attack narrative with a full timeline of operator actions
  • Mapping every step to MITRE ATT&CK
  • Detection gap table: what fired, what should have fired
  • Prioritised remediation with realistic effort estimates
  • Debrief presentation to a non-technical management audience

Tools used

BloodHound / SharpHoundImpacketNetExec (CrackMapExec)RubeusPowerViewSliver or Havoc (open-source C2)Mimikatz (isolated lab only)SysmonAtomic Red TeamNmap

Where this leads

RoleTypical band
Penetration Testerroughly ₹4–9 LPA range
Senior Pentester / Security Consultantroughly ₹10–20 LPA range
Red Team Operatorwidely reported ₹12–30 LPA and above at senior level, but very few positions
Purple Team / Detection Engineerroughly ₹8–18 LPA range

Salary bands are indicative ranges across India and vary widely with skill, city and employer. Public aggregators disagree considerably on specialist roles, so treat any single figure — including these — as a range, not a promise. We do not guarantee placement.

Fees

These are our published course fees. Specialist tracks like the red team course are quoted on the counselling call, because the right scope depends on what you already know — we will not sell you six months of content to teach you something you can cover in six weeks.

Cyber Security Course3–4 months₹15,000
Ethical Hacking Course (CEH-aligned)6 months₹60,000
Digital Forensics2 months / 35 hours₹10,999
CCNA Networking2 months / 45 hours₹8,999

EMI available. No separate lab, material or certificate charges. Vendor exam vouchers (EC-Council, OffSec, CompTIA, AWS, Microsoft) are bought from the vendor — we do not resell them.

Red Team Course in Punjab — FAQs

Is the Red Team Course worth doing from Punjab?

▾
Red teaming simulates a specific, goal-driven adversary instead of scanning for every possible bug. This track covers designing an engagement around an objective, initial access through phishing and exposed services, Active Directory attack paths, credential abuse, lateral movement, command-and-control infrastructure, operational security, and a report that improves detection rather than listing vulnerabilities. Locally, Punjabi households are heavily connected and strongly NRI-linked, so buying decisions often involve relatives in Canada, the UK or Australia. The employers who value this here sit in hosiery, knitwear and textiles, bicycles, auto components and machine tools, sports goods and hand tools. Classes are live online, so where in Punjab you live changes nothing about the teaching, the labs or the certificate.

What do I need to know before starting?

▾
Real comfort with Windows Server and Active Directory — users, groups, GPO, and Kerberos at least conceptually — plus solid networking, prior penetration testing exposure, and PowerShell or Python scripting. You also need hardware for a small multi-VM domain lab; 16GB RAM is the floor and 32GB is far more comfortable.

What will this NOT do for me?

▾
Red team roles in India rarely hire freshers — most operators arrive after three to five years of pentesting, SOC or infrastructure work. This track gives you methodology and lab hours, not seniority. We also do not supply commercial C2 licences, production-ready EDR bypasses, or anything intended for use outside an authorised engagement.

Can a fresher get a red team job after this course?

▾
Almost certainly not, and we say that before you enrol. Red team hiring in India skews heavily toward experienced testers. What this course realistically does for a fresher is make you a stronger pentest or SOC candidate who understands attack paths — then red team becomes a role you grow into after a few years.

Kya aap Cobalt Strike sikhate hain?

▾
Nahi. Cobalt Strike ka licence commercial hai aur bahut mehnga, aur cracked copies use karna illegal bhi hai aur khatarnak bhi. Hum Sliver aur Havoc jaise open-source C2 par padhate hain — concepts, beacon behaviour aur OPSEC wahi rehte hain, sirf tool alag hai.

Do I need my own lab, or do you provide one?

▾
We provide a guided build for a small Active Directory lab — a domain controller, two workstations and a member server — plus configuration scripts. You run it on your own machine, which is why 16GB RAM is a hard requirement. Building the lab yourself teaches you as much as attacking it.

Is this course equivalent to CRTP, CRTE or OSCP?

▾
No. It covers overlapping ground and prepares you well for those exams, but it is our own curriculum and our own certificate with a public verification link. Vendor exams must be purchased from Altered Security, OffSec or EC-Council directly. We are not an authorised exam centre for any of them.

We have no office in Punjab

Cyber Defence has one campus — Red Square Market, Hisar, Haryana 125001 — and teaches Punjab live online. We do not list addresses we do not have, we publish no star ratings because we have no verified review corpus, and we do not guarantee placement.

We issue a Cyber Defence certificate with a public verification link. We are not an authorised training centre for EC-Council, OffSec, CompTIA, AWS or Microsoft, and we do not resell their exam vouchers.

Ask whether this track is right for you

Free call with Amit Kumar. If a shorter track or a different starting point suits you better, that is what you will hear.

Call +91 75175 72000