Windows Evasion Bootcamp
What to Expect?
Over the course of 4 weeks, you will:
Key Features
Get Certified (CWEP)
Earning the CWEP certification demonstrates your expertise in Windows evasion techniques. From evading modern EDRs and obfuscating PowerShell/.NET payloads, to understanding API hooking, ETW patching, and advanced stealth tactics. The certification proves your ability to operate undetected in high-security environments and simulate real-world threat actor behavior.
This credential enhances your career prospects, making you stand out for roles such as Red Teamer, Threat Emulation Specialist, or Senior Penetration Tester.
Bootcamp Agenda
Session 1: Introduction to Evasion and Lab Setup
Session 2: PowerShell, .NET, and Payload Obfuscation
Session 3: Understanding EDRs and Hooking Mechanisms
Session 4: EDR Evasion with Elastic and Stealth Techniques
Bootcamp Schedule (June 2025 Batch)
This live bootcamp is delivered over four consecutive Saturdays, starting from June 7th, 2025, and concluding on June 28th, 2025.
- Live, Instructor-led Training via Zoom
- Private Discord Community for Discussions and Q&A
- Recorded Sessions Available after each Class
Live Session Dates:
- Live Session 1: Saturday, June 7 @ 2 pm-6 pm IST
- Live Session 2: Saturday, June 14 @ 2 pm-6 pm IST
- Live Session 3: Saturday, June 21 @ 2 pm-6 pm IST
- Live Session 4: Saturday, June 28 @ 2 pm-6 pm IST
Who Should Join This Bootcamp?
- Red Teamers: Those looking to enhance their skills in bypassing endpoint defenses and executing stealthy attacks.
- Cybersecurity Enthusiasts: Individuals with a foundational understanding of security who want to take their skills to the next level.
- Penetration Testers: Learn how to evade detection during assessments and craft more sophisticated attacks..
-
Blue Teamers Transitioning to Offensive Roles
:
Gain insight into evasion tactics to better defend against real-world attacks.
-
Malware Developers
:
Learn how to create payloads that can bypass modern detection mechanisms.
Training Instructor
Siddharth Johri
Security Consultant
Siddharth Johri is a cybersecurity professional skilled in Network Pentesting, AD Security, and Red Teaming, with a focus on uncovering vulnerabilities while evading detection and defenses.
Key Takeaways
- Hands-on training in Windows evasion techniques used by real-world adversaries.
- Strong foundation in Windows internals, including Win32 APIs, processes, threads, and AMSI behavior.
- Mastery of PowerShell and .NET obfuscation techniques to evade detection.
- Exposure to EDR fundamentals, API hooking concepts, and an introduction to Event Tracing for Windows (ETW).
- Real-world labs simulating stealthy payload execution, low-noise attacks, and defensive evasion against Elastic EDR.
- Official certification as Certified Windows Evasion Practitioner (CWEP) upon successful completion.
Why Attend?
- Learn the techniques used by real-world adversaries and acquire essential skills for advanced red teaming.
- Gain practical experience working with powerful EDR tools and bypassing endpoint defenses in real-time.
- As detection techniques evolve, it's crucial to stay up-to-date on the latest methods to remain competitive in the field.
- Get personalized guidance from experienced red teamers and security professionals.
- This bootcamp prepares you for advanced adversary emulation work, making you a valuable asset to any cybersecurity team.
FAQs
While prior Malware Development experience will be advantageous, this course does not have malware development as a pre-requisite. However, basic knowledge about cybersecurity and attacking Windows and Active Directory Infrastructure will be assumed.
You will gain hands-on experience with Elastic EDR, PowerShell, .NET, AMSI, and Windows APIs. Labs are designed to simulate real-world environments and use open-source EDR tools for detection and evasion.
Yes, all participants will have access to course materials, recorded sessions, and lab setups for a limited period after the bootcamp ends.
Yes, participants who complete the bootcamp will receive a certificate of completion, validating their newfound skills in Windows evasion techniques and red teaming.
Don’t forget to bring the Flag to the FOXXCON meetup.
Training Partners
Ready to Master the Art of Pentesting?
Affordable Price
Unlock your potential with affordable upskilling! Our unbeatable course prices are your chance to level up without breaking the bank. Don't wait to enhance your skills – join us today and take the first step towards a brighter future!
Group Discount
Upskill your team with our hands-on Web Application Hacking Bootcamp and master real-world vulnerabilities.
5-9 Participants: 15% off
10+ Participants:20% off
Contact us at training@redfoxsec.com.
Certificate of Completion
Upon completing our course, you'll receive a certificate of completion to showcase your new skills. Add it to your resume or LinkedIn profile to stand out to potential employers. Let your accomplishments speak for themselves and take your career to the next level!
Hands-On Experience
Get hands-on experience with real-world scenarios and challenges, giving you practical skills that you can apply immediately in your career.
Expert Instructors
Learn from industry experts with years of experience in pentesting, who are passionate about sharing their knowledge and helping you succeed.
Flexible Learning
Whether you're a beginner or an experienced professional, our courses are designed to meet you where you are and help you reach your goals.
Get in Touch
Have a question, need assistance, or want to collaborate? We’re here to help!
Whether you're looking for cutting-edge cybersecurity solutions or expert training or want to learn more about our services, contact us today.
By clicking on Continue, I accept the Terms & Conditions,
Privacy Policy & Refund Policy