ROPS-RT1 CERTIFICATION
Prove your skills and expertise with our rigorous, hands-on, and proctored certification test.
scheduling your
test
decide on a time
As a student, you can browse the test dates in our training platform, and decide which date/time works best for you. It is a 2-day certification, 10 hours per day. We’ve found the majority of students can finish in the first day, however, we include a second day in case more time is needed to work through the certification.
Typically tests run from 8am-6pm Central Time. If you’re in a different time zone and need accommodations, reach out and we’ll work with you.
prepare your space
Once you pick a test date, you’ll receive a private Teams meeting link for your proctored test session. The day of the test, be prepared to share your web camera, enable microphone, and share your computer screen.
You should ensure you have a private room available for the entire testing period, free of any other individuals to ensure test confidentiality.
Be sure to log into the Teams meeting, as well as Rogue Arena, promptly at the certification test start time.
about your proctor
Your test will be proctored by an employee of Rogue Labs. Your proctor is there to ensure you have the resources you need to take the test, clarify guidelines and rules as needed, and ensure honesty during the testing process.
scenario
&
tradecraft
tradecraft & logging
Students should be prepared to demonstrate any tools/techniques/tradecraft taught in class. This includes logging all significant activities, and following any cleanup steps indicated by the test. Please refer to the end of the course for detailed tradecraft expectations.
scenario 101
The scenario is quite a bit different than the ROPS-RT1 lab, as well as the ROPS-RT1 sister lab scenario, but will still challenge students to use the same Red Team tools and Tradecraft they learned in class. We always encourage students to complete the sister scenario before testing if they can.
Students begin with a “clean” scenario and must setup Red Team infrastructure and redirectors, create initial access payloads learned in class, launch their phishing campaign, and then progress through the scenario narrative escalating in domains, getting persistence, laterally moving to new domains, etc. The instructions are clear, instructing students to get X persistence on a host, etc.
The test will cover information taught and demonstrated in our courses, so students shouldn’t need to study any outside course topics.
test milestones
Students will conduct a Red Team assessment in an all new virtual range scenario. When they unlock the certification test, they'll notice the curriculum viewer changes to scenario mode. The first task will be unlocked and will describe the scenario, provide any needed objective information, and will describe the location of the next task key.
Students should complete any objectives indicated and eventually find the next task key which they will use to unlock the next task. All task key locations are plainly given to students and should be very easy to find.
audit
&
passing
tradecraft audit
Students must complete the whole scenario unlocking all lab sections as they progress through the narrative including completing any “cleanup” steps they are issued at the end.
Once the scenario is complete, the students disconnect and our proctors step in and evaluate all Tradecraft and logging students used throughout the compromise.
Scoring rubric
Proctors will review the student's test performance to ensure they utilized the proper Tradecraft techniques taught in the course. This includes:
Ensuring no “dirty” commands were run such as shell, powershell, execute, etc,
Ensuring no “bad tradecraft” was used such as HTTPS beacons on servers, direct workstation -> workstation traffic, etc
Ensuring students stick to BOF payloads outlined in class
Ensuring students logged all significant activities according to what we taught in class
And more
Proctors will use a scoring rubric to compute how many points off a student may have from the Tradecraft or logging mishaps listed above. Different mishaps are worth different point scores. Students who retain sufficient points after the audit will pass and earn their certification.
after
the
test
you passed!
When you complete the certification, we mail you a printed certificate, challenge coin, and issue you a digital Credly badge.
A ROPS-RT1 certification is a valuable asset proving your skills and expertise in Red Team tradecraft, tools, and techniques. This certification can count as CE credits, as well as be added to your resume for any future employment opportunities you pursue.
options to re-test
Each course option includes a different number of certification attempts. Cool down periods between test attempts apply: 2 weeks after attempt one, 4 weeks after attempt two, and 6 weeks after each subsequent attempt.
If you run out of certification attempts, you can purchase additional attempts at $299 each. Take some time to review the course materials, and reach out to us to schedule your new attempt.
Ready to Take the Leap?
Enroll today and become a part of the next generation of Red Team professionals!