Windows CNE develops advanced operator skills for conducting targeted Windows host reconnaissance, persistence, privilege escalation, lateral movement, and remote exploitation within controlled environments. The course emphasizes detectable tradecraft, evasion techniques, and defensive considerations so participants learn both offensive techniques and how they appear from a detection standpoint. Instruction balances conceptual tradecraft with repeatable procedures and lab exercises; learners finish the week by demonstrating integrated capability in a timed Culmination Exercise (CULEX).
Intended Audience: Personnel performing Computer Network Exploitation (CNE), red team operations, or adversary emulation who require advanced host-level skills for reconnaissance, persistence, escalation, and movement within Windows environments.