Visit Us At Secure360 Booth #405

Most organizations use typical penetration testing that focuses on exposing an attack surface and chaining together exploits to accomplish certain objectives, such as gaining administrative access to environments or gaining access to sensitive data. However, this style of testing often can miss the mark on targeting all possible attack surface opportunities, and in some cases limit the ability to identify post-exploitation opportunities attackers could use. 

That’s where Purple Team comes in!

A purple team is an assumed breach-style test in which cyber defense teams work with cyber offensive teams to identify gaps in logging, alerting, and prevention of attacks. When introducing Purple Teaming into your cyber security framework, along with traditional penetration testing, you can dig deeper! 

In this session, we will cover the different phases of purple team exercises from both the defensive and offensive perspectives. It is a purple team after all - working together and being on the same page is critical to success. Starting with aligning the appropriate planning, whether it’s provisioning access to corporate environments or deploying robust Command and Control environments, etc. The session will then roll into the execution of a MITRE ATT&CK Framework-based purple team exercise with tools, tactics, procedures (TTPs), and more. In this phase, we will focus on how to make the most of the assessment for the organization. Finally, the session will cover some of the pitfalls in testing that have been observed over years of running engagements, with strategies on how to overcome or avoid them.

Wednesday, May 15th at 11am