Deconstructing Logon Session Enumeration

Purple Teaming

How we define and create test cases for our purple team runbooks

Intro

In our purple team service, we try to take a depth and quality approach and run many different functionally diverse test cases for a given technique. In this blog, I will describe our process of defining and implementing test cases for our purple team runbooks. The goal of this blog post is to provide the community with a bit more information about how we implement …

blog cases depth detection engineering enumeration information security infosec intro logon process purple purple team quality run service session specterops team test try