Skip to content

Tradecraft Development in Adversary Simulations

Fatih Ozavci

Fatih Ozavci shares systematic methodologies for developing custom tradecraft, repurposing public tools, and tuning evasion for high-maturity adversary simulations.

Summary

Building Campaign-Specific Adversary Tradecraft

Real-world threat actors rarely develop entirely new tools for every engagement; they strategically select, modify, and repurpose existing open-source and commercial tooling.

Analyzing Tool Selection and Weaponization Tradeoffs

Fatih Ozavci examines the operational calculus behind tool selection, analyzing when to build custom implants versus when to pack and modify public frameworks.

Developing Resilient Evasion Primitives

Ozavci demonstrates practical techniques for modifying public tools to strip known IOCs, implement custom memory loaders, and bypass endpoint inspection hooks.

Structuring Continuous Tradecraft Development

The author provides red team leads with a structured operational pipeline to research, build, and maintain evasive tradecraft across simulation lifecycles.

Related talks