Skip to content

Back to the catalog

kuwaitist.github.ioarticle

ARTOC by White Knight Labs - Review

A reviewer's first-person writeup of the Advanced Red Team Operations Certification (ARTOC) by White Knight Labs, covering a full red team engagement curriculum: building C2 infrastructure with Cobalt Strike and Adaptix, cloud redirectors across AWS, Azure and GCP via CDNs and serverless functions, Active Directory and ADCS exploitation, and kernel and user mode EDR evasion, tested against real enterprise EDR products. The exam is a 48-hour infrastructure build and compromise exercise followed by a 48-hour red team report. The post is a positive testimonial encouraging enrollment rather than a technical walkthrough of any attack.

TL;DR Glowing third-party review of White Knight Labs' ARTOC red team certification, with no technical content of its own.
Open original ↗
Document

What it is

A first-person review of White Knight Labs' Advanced Red Team Operations Certification (ARTOC). The reviewer recommends it and adds several details about how the lab and course are delivered that the catalog summary leaves out.

Lab delivery

  • The lab is deployed from a student portal into the student's own private AWS environment. The reviewer says it builds with one click and can be destroyed and rebuilt at will.
  • The portal has built-in cost tracking and budget controls. This implies the student carries the AWS bill, though the page gives no cost figures.
  • Cobalt Strike is fully licensed for lab use, and Adaptix C2 was added recently. The reviewer says students get access to "the best EDRs" to test against, without naming any products.
  • Course and lab access is lifetime, according to the reviewer. Course content is delivered as markdown through the portal.

Content detail

  • The course explains how to customize Cobalt Strike malleable profiles and how those choices affect detection.
  • The reviewer says payloads will most likely be caught by the EDRs, so students must rework their tooling until it works.

Related course

The reviewer pairs ARTOC with White Knight Labs' ODPC, which they describe as more focused on malware development. They say its skills carry into the ARTOC labs and exam.

Caveats

The page is a testimonial. It gives no price, prerequisites, EDR product names, pass rates or comparison with other courses. Claims such as "best labs in the market" are the reviewer's opinion.

Organisations named here

  • ADCS exploitation

Technologies named here

  • Cobalt Strike
  • Adaptix
  • AWS
  • Azure
  • GCP
  • Active Directory
  • EDR
  • Advanced Red Team Operations Certification (ARTOC)
  • Enterprise EDR
  • ODPC

Techniques named here

  • Initial Access
  • Lateral movement
  • Active Directory exploitation
  • ADCS exploitation
  • C2 infrastructure setup
  • Cloud-based redirectors
  • Cobalt Strike malleable profile customization
  • Kernel and user-mode evasion
  • Red team reporting

Related in Offensive Security