Join us at Specter Bash for our annual training event with a Halloween twist. Register now

  • Contact Us
  • Support
  • Blog
SpecterOps
Book a Demo
  • Platform
    • Attack Path Management

      BloodHound Enterprise
      BloodHound Community
      Integrations

      Adversary Operations

      AI Red Teaming
      AI Red Team Enablement
      AI Cyber Ranges

      By Industry

      Financial Services Public Sector Healthcare
      Trends in Identity Attack Path Management

      Trends in Identity Attack Path Management

      We surveyed more than 500 security and identity leaders on how their organizations are managing growing identity risk.

      Get the report
  • Services
    • Services

      AI Red Teaming
      AI Security Assessments
      Application Security Assessments
      Penetration Testing
      Attack Path Assessments
      Maturity Assessments
      Purple Team Assessments
      Custom Solutions
      AI Cyber Ranges

      AI Cyber Ranges

      SpecterOps delivers cyber ranges for AI withstandardized environments and realistic conditions to validate model performance against known completion paths.

      Learn more
      SpecterOps joins OpenAI's Trusted Access for Cyber program to bring Daybreak AI capabilities to BloodHound Enterprise and GhostWorks, advancing AI-powered attack path management

      SpecterOps and OpenAI: Helping to Build a New Security Frontier with Daybreak

      Today, OpenAI announced that it is expanding access to its frontier AI cybersecurity capabilities for a trusted circle of industry partners.

      Read more
  • Training
    • Tradecraft Academy

      Adversary Tactics

      Red Team Operations
      Identity-Driven Offensive Tradecraft
      Detection
      Tradecraft Analysis

      Adversary Perspectives

      Active Directory
      Azure

      On-Demand Training

      BloodHound Basics
      SSC Security for Red Teamers
      Kubernetes for Red Teamers
      Training Events Join us at one of our live events to learn the tradecraft, techniques, and strategies used in real operations
      SpecterOps Tradecraft Academy

      SpecterOps Tradecraft Academy

      Hands-on offensive and defensive security training built by SpecterOps practitioners.

  • Community
    • Community Hub

      Explore Community
      Join the Community
      Our Commitment to Open Source

      Open Source Tools

      Mythic
      Ghostwriter
      Nemesis

      Community Events

      North America
      Europe
      Online
      See what you missed at Black Hat USA

      See what you missed at Black Hat USA

      This year at Black Hat, our team took to both the Briefings stage and the Arsenal showcase to talk tradecraft, trends, and where attack path management is headed.

      Explore more
  • Company
    • About Us

      Why SpecterOps
      Company News

      Get in Touch

      Careers
      Contact Us

      Events

      North America
      Europe
      Online
      SpecterOps joins OpenAI's Trusted Access for Cyber program to bring Daybreak AI capabilities to BloodHound Enterprise and GhostWorks, advancing AI-powered attack path management

      SpecterOps and OpenAI: Helping to Build a New Security Frontier with Daybreak

      Today, OpenAI announced that it is expanding access to its frontier AI cybersecurity capabilities for a trusted circle of industry partners.

      Read more
  • Resources
    • Research & Reports

      Case Studies
      White Papers
      Tools
      Datasheets
      Podcasts
      Webinars

      Blog

      Research & Tradecraft
      AI & Security
      BloodHound
      Industry Insights
      Company Updates
      Video
      Trends in Identity Attack Path Management 2026

      Trends in Identity Attack Path Management 2026

      We surveyed more than 500 security and identity leaders on how their organizations are managing growing identity risk.

      Get the report
      Explore AI Resources

      Explore AI Resources

      SpecterOps helps your organization lean into AI adoption while staying ahead of the risks.

      Learn more
  • Book a Demo
  • Contact Us
    Support
    Blog
  • Book a Demo

Zach Stein

Senior Consultant

Zach Stein is a Senior Consultant at SpecterOps specializing in Adversary Simulation. His interests are in red teaming, evasion, and automation.

See the latest by Zach Stein

Don’t Jump the Turnstile: Lessons from the Field

Research & Tradecraft

Don’t Jump the Turnstile: Lessons from the Field

TL;DR: Phishing sandboxes are a pain. Cloudflare Turnstile can be used as an effective solution to conceal your phishing pages.…

By: Zach Stein

15 mins

Git SCOMmit – Putting the Ops in OpsMgr

Research & Tradecraft

Git SCOMmit – Putting the Ops in OpsMgr

TL;DR Yet another System Center Ludus configuration for your collection. https://github.com/Synzack/ludus_scom Intro As you may know, here at SpecterOps we…

By: Zach Stein

14 mins

Automating SCCM with Ludus: A Configuration Manager for Your Configuration Manager

Research & Tradecraft

Automating SCCM with Ludus: A Configuration Manager for Your Configuration Manager

TL;DR: Using Ludus as the backend, and with the help of Erik at Bad Sector Labs, I present a fully…

By: Zach Stein

13 mins

Getting Intune with Bugs and Tokens: A Journey Through EPM

Research & Tradecraft

Getting Intune with Bugs and Tokens: A Journey Through EPM

Written by Zach Stein & Duane Michael SpecterOps Hackathon Back in January, SpecterOps held our annual hackathon event, loosely based on…

By: Zach Stein

19 mins

SpecterOps

Platform

Attack Path Management
Adversary Operations

Services

AI Red Teaming
Security Assessments
Penetration Testing
Attack Path Assessments
Purple Team Assessments

Training

Red Team Operations
Identity-Driven Offensive Tradecraft
Detection
Tradecraft Analysis

Community

Explore Community
Join the Community
Open Source Tools
Community Events

Resources

Blog
Research & Reports

Company

About Us
Events
Careers

Copyright 2026 Specter Ops, Inc. All Rights Reserved.

Terms of Service
|
Privacy Policy
|
Security
|
Trust Center
|
Premera Transparency Files