SpecterOps EU 2026 Trainings

This is a 4-day training event, hosted at the Apollo Hotel Amsterdam.

Tuesday, June 16 - Friday, June 19, 2026

Each class will run from 9AM to 5PM CEST, with breakfast served at 8AM CEST each day.

There is paid parking onsite, SpecterOps will cover this charge.

Upgrade your skills by taking one of our courses

• Engage with our Frontline Practitioners
• Hands-on Labs throughout the courses
• Swag Pack

As modern architecture increasingly shifts services and data from on-premises infrastructure to the cloud, Identity becomes the thread that ties everything together.

Our Adversary Tactics: Identity-driven Offensive Tradecraft course is a follow-on to our Adversary Tactics: Red Team Operations course and offers an in-depth look at identity-driven attacks, targeting both on-premises and hybrid identities. Participants will learn how to abuse the intricacies of different authentication and authorization mechanisms to traverse on-premises and cloud environments, gain access to integrated systems, and even cross tenants. Participants will also be equipped with a practical approach to identifying known attack paths and forging new ones within complex operational environments and across people, processes, and technology.

Full course details here.

Before you can emulate or defend against the tactics of an adversary operating in Azure and Entra ID, first you must understand their perspective. How do premiere security operators view Azure’s infrastructure components, common architecture designs, and security controls? Through hands-on labs, this course teaches participants how to identify misconfigurations in Azure and Entra ID that are commonly leveraged by attackers. Participants should expect to walk away from the Adversary Perspectives: Azure course with a strong foundation of Azure and Entra ID security knowledge and having taken their first step in attacking or defending corporate Azure and Entra ID environments.

Organizations have their heads in the clouds, or at least their infrastructure. Gone are the days of on-premises domain controllers and Exchange servers. Microsoft’s Azure provides organizations with the ability to deploy cloud hosts and services to augment, or in some cases, replace existing functionality completely. All of these new cloud assets need protection, both through traditional defensive security measures, and offensive security assessments. For new and veteran security professionals alike, understanding how these new technologies work and the nuances of securing them can quickly become complicated.

Adversary Perspectives: Azure provides participants without previous Azure experience with a solid understanding of how attackers look at Microsoft Azure and Entra ID, its authentication mechanisms, and how they commonly attack Azure-based environments.

Full course details here.

Reach out to training@specterops.io and a Specter will be in touch soon!

Know what’s Happening Next — before everyone else does.

Get App

Host or Publisher SpecterOps