Introduction to Offensive Cyber Operations Frameworks

Catalog description

This hands-on course introduces students to the practical tools of offensive cyber operations (OCO) in a controlled university managed lab environment using Metasploit, Mythic, Cobalt Strike and other tools as presented in class. Students learn to plan and execute adversary tactics, techniques, and procedures (TTPs) within an isolated range, including reconnaissance, exploitation, post exploitation (privilege escalation, persistence), lateral movement, and command and control (C2) operations. Emphasis is on ethical/legal boundaries, Rules of Engagement (RoE), safety and disciplined operational planning to objective. The course culminates in an exercise where student teams execute a multi-stage operation against a synthetic adversary network to retrieve flags. Instructors act as environment controllers and white card injects (e.g., service changes, network conditions) to simulate realistic security tolls and defensive experts who could catch their activities. Prerequisite: Grade of D- or higher in CS 260 and CS 270. Offered: Fall, Spring.