Hey there. I'm Rishalin Pillay, and welcome to this Red Team tools course.
You may have heard about APT groups such as APT19 who
has targeted a variety of industries.
What about FIN10,
who is a financially motivated group who uses
stolen data to extort organizations?
Another group is the CopyKittens.
They were responsible for Operation Wilted Tulip.
What is so significant about these groups?
Well, one of the tools that they actively use is called Empire,
commonly referred to as PowerShell Empire.
Once these APT groups establish C2 channels into an environment,
the next step is for them to maintain their foothold.
This is where persistence comes into play.
In this course,
I will show you how to establish persistence using
Empire. Empire leverages PowerShell, which is predominantly used today.
PowerShell is an extremely powerful tool,
which is used by both administrators and attackers. Empire
has the ability to manage multiple agents and perform
multiple post‑exploitation capabilities.
It is robust with over 300 modules that can be used. If you are looking
for a tool that can be used for persistence, please join me in this
course where I will show you how to perform persistence techniques that
are used today by real‑world attackers.