In the Trenches: Purple Team Do’s and Don’ts

SANS PenTest HackFest 2022

Speaker: Chris Peacock, Adversary Emulation - Detection Engineer, SCYTHE

Chris’s purple team experience includes every part of the purple team process: cyber threat intelligence, adversary emulation, and detection engineering. In this talk we will cover lessons learned from a multitude of engagements, discussing what works and doesn’t. Attendees can expect to learn how to implement purple team best practices, managing expectations, and building outcomes to help rock future purple team exercises.

View upcoming Summits: http://www.sans.org/u/DuS
Download …

adversary adversary emulation best practices chris cyber cyber threat cyber threat intelligence detection detection engineering don emulation engineer engineering expect experience future hackfest intelligence learn lessons learned outcomes pentest practices process purple purple team sans team threat threat intelligence