Join us at Specter Bash for our annual training event with a Halloween twist. Register now

  • Contact Us
  • Support
  • Blog
SpecterOps
Book a Demo
  • Platform
    • Attack Path Management

      BloodHound Enterprise
      BloodHound Community

      Adversary Operations

      AI Red Teaming
      AI Red Team Enablement
      AI Cyber Ranges

      By Industry

      Financial Services Public Sector Healthcare
      Trends in Identity Attack Path Management

      Trends in Identity Attack Path Management

      We surveyed more than 500 security and identity leaders on how their organizations are managing growing identity risk.

      Get the report
  • Services
    • Services

      AI Red Teaming
      AI Security Assessments
      Application Security Assessments
      Penetration Testing
      Attack Path Assessments
      Maturity Assessments
      Purple Team Assessments
      Custom Solutions
      AI Cyber Ranges

      AI Cyber Ranges

      SpecterOps delivers cyber ranges for AI withstandardized environments and realistic conditions to validate model performance against known completion paths.

      Learn more
      SpecterOps joins OpenAI's Trusted Access for Cyber program to bring Daybreak AI capabilities to BloodHound Enterprise and GhostWorks, advancing AI-powered attack path management

      SpecterOps and OpenAI: Helping to Build a New Security Frontier with Daybreak

      Today, OpenAI announced that it is expanding access to its frontier AI cybersecurity capabilities for a trusted circle of industry partners.

      Read more
  • Training
    • Tradecraft Academy

      Adversary Tactics

      Red Team Operations
      Identity-Driven Offensive Tradecraft
      Detection
      Tradecraft Analysis

      Adversary Perspectives

      Active Directory
      Azure

      On-Demand Training

      BloodHound Basics
      SSC Security for Red Teamers
      Kubernetes for Red Teamers
      Training Events Join us at one of our live events to learn the tradecraft, techniques, and strategies used in real operations
      SpecterOps Tradecraft Academy

      SpecterOps Tradecraft Academy

      Hands-on offensive and defensive security training built by SpecterOps practitioners.

  • Community
    • Community Hub

      Explore Community
      Join the Community
      Our Commitment to Open Source

      Open Source Tools

      Mythic
      Ghostwriter
      Nemesis

      Community Events

      North America
      Europe
      Online
      See what you missed at Black Hat USA

      See what you missed at Black Hat USA

      This year at Black Hat, our team took to both the Briefings stage and the Arsenal showcase to talk tradecraft, trends, and where attack path management is headed.

      Explore more
  • Company
    • About Us

      Why SpecterOps
      Company News

      Get in Touch

      Careers
      Contact Us

      Events

      North America
      Europe
      Online
      SpecterOps joins OpenAI's Trusted Access for Cyber program to bring Daybreak AI capabilities to BloodHound Enterprise and GhostWorks, advancing AI-powered attack path management

      SpecterOps and OpenAI: Helping to Build a New Security Frontier with Daybreak

      Today, OpenAI announced that it is expanding access to its frontier AI cybersecurity capabilities for a trusted circle of industry partners.

      Read more
  • Resources
    • Research & Reports

      Case Studies
      White Papers
      Tools
      Datasheets
      Podcasts
      Webinars

      Blog

      Research & Tradecraft
      AI & Security
      BloodHound
      Industry Insights
      Company Updates
      Video
      Trends in Identity Attack Path Management 2026

      Trends in Identity Attack Path Management 2026

      We surveyed more than 500 security and identity leaders on how their organizations are managing growing identity risk.

      Get the report
      Explore AI Resources

      Explore AI Resources

      SpecterOps helps your organization lean into AI adoption while staying ahead of the risks.

      Learn more
  • Book a Demo
  • Contact Us
    Support
    Blog
  • Book a Demo

Matt Nelson

Managing Consultant

Matt Nelson is a Managing Consultant at SpecterOps specializing in Adversary Simulation. His technical focus areas include Windows feature abuse and vulnerability research.

See the latest by Matt Nelson

Reviving DDE: Using OneNote and Excel for Code Execution

Research & Tradecraft

Reviving DDE: Using OneNote and Excel for Code Execution

By: Matt Nelson

7 mins

Lateral Movement Using Outlook’s CreateObject Method and DotNetToJScript

Research & Tradecraft

Lateral Movement Using Outlook’s CreateObject Method and DotNetToJScript

By: Matt Nelson

4 mins

A Look at CVE-2017–8715: Bypassing CVE-2017–0218 using PowerShell Module Manifests

Research & Tradecraft

A Look at CVE-2017–8715: Bypassing CVE-2017–0218 using PowerShell Module Manifests

By: Matt Nelson

6 mins

UMCI Bypass Using PSWorkFlowUtility: CVE-2017–0215

Research & Tradecraft

UMCI Bypass Using PSWorkFlowUtility: CVE-2017–0215

By: Matt Nelson

3 mins

Lateral Movement using Excel.Application and DCOM

Research & Tradecraft

Lateral Movement using Excel.Application and DCOM

By: Matt Nelson

6 mins

UMCI vs Internet Explorer: Exploring CVE-2017–8625

Research & Tradecraft

UMCI vs Internet Explorer: Exploring CVE-2017–8625

By: Matt Nelson

3 mins

WSH Injection: A Case Study

Research & Tradecraft

WSH Injection: A Case Study

By: Matt Nelson

4 mins

Bypassing AMSI via COM Server Hijacking

Research & Tradecraft

Bypassing AMSI via COM Server Hijacking

By: Matt Nelson

6 mins

Phishing Against Protected View

Research & Tradecraft

Phishing Against Protected View

By: Matt Nelson

6 mins

Page 2 / 3
SpecterOps

Platform

Attack Path Management
Adversary Operations

Services

AI Red Teaming
Security Assessments
Penetration Testing
Attack Path Assessments
Purple Team Assessments

Training

Red Team Operations
Identity-Driven Offensive Tradecraft
Detection
Tradecraft Analysis

Community

Explore Community
Join the Community
Open Source Tools
Community Events

Resources

Blog
Research & Reports

Company

About Us
Events
Careers

Copyright 2026 Specter Ops, Inc. All Rights Reserved.

Terms of Service
|
Privacy Policy
|
Security
|
Trust Center
|
Premera Transparency Files