Thank you, Chris Peacock, for telling us about his Purple Team 101 training session
summary
Covers a practical cycle for threat-driven purple teaming that moves from gathering cyber threat intelligence to extracting attacker procedures, then to emulate with a red team exercise and measure detections, producing concrete lists of missed telemetry and triage hits. Shows how to turn those failures into prioritized controls and blocking playbooks, and how to fold the steps into a recurring purple team process so detection gaps get fixed rather than just reported.
AI-written summary · about
related talks
41mPurple Is the New Red - Providing the Most Value from Offensive Security
43mShades of Purple: Getting Started and Making Purple Teaming Possible
39mColorful AppSec - Red, Blue, or Purple?
52mBuilding the Always-On Purple Team
53mIncreasing Security ROI with Adversary Simulation and Purple Teaming
49mTraining for Incident Response: The Red, the Blue, and the Ugly
45mThis is application purple teaming
25mStandard Classification: Purple Teaming with PurpleTeam