GIAC (SANS)GIAC Red Team Professional
The GIAC Red Team Professional (GRTP) certification validates your ability to conduct end-to-end Red Team engagements, from building an adversary emulation plan to establishing command-and-control infrastructure and emulating adversary tactics, techniques, and procedures (TTPs). Designed for security professionals responsible for offensive operations, this hands-on, performance-based certification proves you can improve your organization's security by thinking and operating like a real adversary.
443 practice questions · Updated 2026-07-30
GRTP Curriculum
Every domain, objective, and concept the GRTP exam measures.
- Adversary Emulation Definition
- Adversary Emulation Frameworks
- Threat Modeling and Intelligence
- Emulation Planning and Scoping
- Emulation Execution
- Detection and Response Evaluation
- Reporting and Lessons Learned
- Engagement Planning Fundamentals
- Rules of Engagement (RoE)
- Stakeholder Identification and Communication
- Resource and Logistics Planning
- Risk Management in Engagement Planning
- Reporting Structure and Content
- Findings Documentation and Prioritization
- Post-Engagement Activities
- Attack Infrastructure Planning
- C2 Framework Selection
- Redirector and Proxy Setup
- Domain and Hosting Management
- TLS and Certificate Handling
- Infrastructure Resilience and OPSEC
- Infrastructure Lifecycle Management
- C2 Architecture
- C2 Protocols
- C2 Channels
- C2 Payloads
- C2 Redirectors
- C2 Encryption and OPSEC
- C2 Infrastructure Management
- Initial Access Vectors
- Phishing Techniques
- Exploitation of Public-Facing Applications
- Valid Account Compromise
- Discovery Techniques
- Network Scanning and Enumeration
- User and Group Enumeration
- System and Service Enumeration
- Data Collection and Exfiltration Preparation
- Discovery and Enumeration Fundamentals
- Network Discovery Techniques
- Service Enumeration
- Host Enumeration
- Active Directory Enumeration
- Web Application Enumeration
- Cloud and Virtual Environment Enumeration
- Enumeration Data Analysis and Documentation
- Privilege Enumeration
- Privilege Attack Vectors
- Privilege Abuse Techniques
- Post-Enumeration Exploitation
- Active Directory Fundamentals
- Authentication Protocols
- Enumeration Techniques
- Kerberoasting
- AS-REP Roasting
- Pass-the-Hash Attacks
- Pass-the-Ticket Attacks
- Overpass-the-Hash Attacks
- Golden Ticket Attacks
- Silver Ticket Attacks
- Skeleton Key Attacks
- DCSync Attacks
- ACL Abuse
- GPO Abuse
- Delegation Attacks
- Domain Trust Attacks
- Lateral Movement Techniques
- Persistence Mechanisms
- Defensive Evasion
- Domain Enumeration
- Kerberoasting
- AS-REP Roasting
- Pass-the-Hash
- Pass-the-Ticket
- Golden Ticket
- Silver Ticket
- DCSync
- AdminSDHolder and SDProp
- Group Policy Object (GPO) Abuse
- Skeleton Key
- ACL-Based Persistence
- Domain Trust Exploitation
- Lateral Movement via Scheduled Tasks
- Lateral Movement via WMI
- Lateral Movement via WinRM
- Lateral Movement via PsExec
- Credential Dumping from LSASS
- NTDS.dit Extraction
- Password Spraying
- Kerberos Delegation Abuse
- Privilege Escalation via Misconfigured ACLs
- Domain Controller Synchronization (DCSync)
- SID History Injection
- GPO Link and Enforcement
- Persistence Mechanisms
- Exfiltration Techniques
- Detection Evasion
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for GRTP, so none is invented.