WEBVTT

00:00:05.040 --> 00:00:09.270
Hey there. I'm Rishalin Pillay, and welcome to this Red Team Tools

00:00:09.270 --> 00:00:15.680
course. You may have heard about APT groups such as APT19 who has

00:00:15.680 --> 00:00:18.910
targeted a variety of industries, including defense,

00:00:18.920 --> 00:00:22.070
finance, legal services, and more.

00:00:22.840 --> 00:00:27.260
What about FIN10 who is a financially motivated group who

00:00:27.260 --> 00:00:31.160
uses stolen data to extort organizations.

00:00:32.040 --> 00:00:35.210
Another well‑known group is CopyKittens who were

00:00:35.210 --> 00:00:37.780
responsible for Operation Wilted Tulip.

00:00:38.340 --> 00:00:43.020
Now you may be wondering, what is so significant about these groups? Well,

00:00:43.430 --> 00:00:47.390
one of the tools that is common among these APT groups, and a

00:00:47.390 --> 00:00:50.280
few other groups, is the tool called Empire,

00:00:50.290 --> 00:00:53.040
commonly referred to as PowerShell Empire.

00:00:53.340 --> 00:00:54.140
In this course,

00:00:54.250 --> 00:00:56.940
I will show you how to establish Command and Control with

00:00:56.940 --> 00:01:01.450
Empire. Empire leverages PowerShell, which is commonly used today.

00:01:01.810 --> 00:01:05.720
PowerShell is an extremely powerful tool which is used

00:01:05.730 --> 00:01:08.590
by both administrators and attackers.

00:01:09.240 --> 00:01:12.760
It has the ability to manage multiple agents and perform

00:01:12.760 --> 00:01:15.360
multiple post‑exploitation capabilities.

00:01:15.370 --> 00:01:18.020
Since this is a post‑exploitation framework,

00:01:18.030 --> 00:01:23.130
it is very robust and contains over 300 modules that can be used.

00:01:23.140 --> 00:01:26.860
If you are looking for a tool that can be used for Command and Control,

00:01:26.870 --> 00:01:29.470
please join me in this course where I will show you how to

00:01:29.470 --> 00:01:32.940
perform Command and Control techniques that are used today

00:01:32.950 --> 00:01:34.390
by real‑world attackers.