Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

BSidesKC 2021 - David Evenden's 'Emulating The Adversary While Training The Defenders: Purple Teaming With MITRE ATT&CK' →

December 05, 2021 by Marc Handelman in BSides, BSidesKC, Education, Security, Cybersecurity Education, Infosec Education, Information Security, Defensive Security, Offensive Security, Cryptology Education, Industrial Security, MITRE ATT&CK, Purple Team

Our thanks to BSidesKC for publishing their outstanding BSidesKC 2021 videos on the Conferences’ YouTube channel.

December 05, 2021 /Marc Handelman
BSides, BSidesKC, Education, Security, Cybersecurity Education, Infosec Education, Information Security, Defensive Security, Offensive Security, Cryptology Education, Industrial Security, MITRE ATT&CK, Purple Team

WebApp Security, 'My Experience Leading A Purple Team' →

June 26, 2018 by Marc Handelman in Red Team, Blue Team, Purple Team, Penetration Testing, Information Security

A terrific Red & Blue (in reality - Purple's the Word, in this case) Teaming Leadership post (via Robert A., posting on the Web Application Security Consortium List) detailing his experience leading a Purple Team, and the oversight work assocciated with that team color). Very pleased to see this form of shared learning in the Red Team space. Today's Must Read.

"Purple: Purple teaming in my experience is the oversight of how red and blue operate, coordination to strengthen the effectiveness of both red/blue, and improved relationships with impacted stakeholders (dev/it/ops/etc). It likely isn't it's own team, it's the leaders of the blue/red teams coordinating with it's members and cross-org stakeholders to optimize how they operate." via Robert A.'s superlative post further via Web Application Security Consortium List**)

June 26, 2018 /Marc Handelman
Red Team, Blue Team, Purple Team, Penetration Testing, Information Security