Capabilities

The holder of an active CRTS-V2 Certificate possesses the capability to:

• Plan and execute enterprise Red Team engagements following realistic adversary simulation methodologies.
• Perform reconnaissance and initial access operations using OSINT, remote access exploitation, and custom attack scenarios.
• Identify and exploit Microsoft enterprise technologies, including Active Directory Certificate Services (AD CS), Microsoft Exchange, gMSA, and cross-forest environments.
• Conduct advanced lateral movement across Windows and Linux systems using Kerberos, certificate-based authentication, and remote services.
• Exploit enterprise applications, CI/CD platforms, Git Personal Access Tokens (PATs), and automation software to achieve operational objectives.
• Simulate multi-stage attack paths aligned with the MITRE ATT&CK Framework across segmented enterprise environments.
• Assess security posture by documenting attack paths, exploited vulnerabilities, and recommendations through professional Red Team reporting.

Next Steps

This certification is suited for roles such as:

• Red Team Operator
• Senior Penetration Tester
• Offensive Security Consultant
• Red Team Specialist

Learners can advance with the following certifications:

• Certified Enterprise Lateral Movement Specialist (CELMS) Course → Advanced-level course focusing on enterprise lateral movement, privilege escalation, and post-exploitation techniques.

• Certified Red Team Infra Dev (CRT-ID) Course → Advanced-level course focused on building OPSEC-safe Red Team infrastructure, C2 frameworks, redirectors, payload servers, and offensive operations.

Earning Criteria

To earn the CRTS-V2 certificate, students are required to:

• Complete Study Materials via CRP Portal.
• Deploy the CRTS-V2 Cyber Range Lab following the provided instructions
• Schedule CRTS-V2 practical exam via CRP Portal.
• Pass & earn CWL Verified Certificate.