Red team tradecraft primitives. See red-team-operations for path ordering.

Opsec / infra

• opsec-fundamentals · c2-protocol-design
• infrastructure-design · payload-staging
• c2-frameworks

Evasion

• amsi-bypass · etw-bypass · wldp-bypass
• edr-hooks-and-unhooking
• syscall-direct-and-indirect
• living-off-the-land

Execution & loaders

• dll-side-loading · com-hijacking
• parent-pid-spoofing
• process-injection-techniques

Persistence

• persistence-techniques-windows
• ad-persistence

Enterprise infrastructure tradecraft

• sccm-misconfiguration-manager

Adversary feedback

• purple-team-feedback-loop
• ad-recon-low-noise