The Red Team Apprentice Course™ (RTAC) is the entry point to k>fivefour’s progressive Red Team training pipeline, designed to build foundational adversary emulation skills aligned to real-world threat actor tradecraft. Successful completion of RTAC is required before enrolling in the Red Team Journeyman™ Course (RTJC).
In RTAC, students learn how advanced adversaries plan and execute high-profile cyber operations using techniques observed in nation-state and APT campaigns. Course content is continuously updated and informed by current open-source intelligence and industry threat reports, ensuring relevance to modern enterprise and government environments.
The course follows a structured attack methodology that mirrors real adversary operational workflows. Over five days of instructor-led, hands-on training, students execute a full-scope Red Team operation within a purpose-built training environment, targeting a simulated Microsoft® Windows® Active Directory enterprise network. Emphasis is placed on realistic tooling, operational discipline, and understanding how attacker actions map to defensive detection and response.
The course concludes with a practical certification exam designed to validate applied technical skills and operational understanding gained throughout the training.