The Red Team Apprentice Course™ (RTAC) is the entry point to k>fivefour’s progressive Red Team training pipeline, designed to build foundational adversary emulation skills aligned to real-world threat actor tradecraft. Successful completion of RTAC is required before enrolling in the Red Team Journeyman™ Course (RTJC).
In RTAC, students learn how advanced adversaries plan and execute high-profile cyber operations using techniques observed in nation-state and APT campaigns. Course content is continuously updated and informed by current open-source intelligence and industry threat reports, ensuring relevance to modern enterprise and government environments.
The course follows a structured attack methodology that mirrors real adversary operational workflows. Over five days of instructor-led, hands-on training, students execute a full-scope Red Team operation within a purpose-built training environment, targeting a simulated Microsoft® Windows® Active Directory enterprise network. Emphasis is placed on realistic tooling, operational discipline, and understanding how attacker actions map to defensive detection and response.
The course concludes with a practical certification exam designed to validate applied technical skills and operational understanding gained throughout the training.
If you need to cancel or reschedule, contact us as soon as possible. Cancellations made 30 or more days before the course start date are eligible for a full refund or a no-cost transfer to a future session. Between 15 and 29 days out, you can transfer to a future session at no cost, or receive a refund less a 15% administrative fee. Within 14 days of the start date, fees are non-refundable, though a one-time transfer may be available at our discretion. You may also send a substitute attendee from your organization at no charge up to the course start date. If k>fivefour cancels or reschedules a course, you'll receive a full refund or a transfer of your choice.