Practical Purple Teaming

This practical introduction to collaborative security testing, or “purple teaming,” is a hands-on, lab-based guide to key methodologies for cybersecurity practitioners in any field.
Many organizations have chosen to forgo traditional security tests in favor of collaborative assessments – or “purple team” tests, for the way they combine offensive (“red team”) and defensive (“blue team”) elements – in which offensive and defensive teams work together to measure and improve the organization’s resilience to attacks.
Practical Purple Teaming outlines common purple team methodologies, offensive and defensive frameworks, and real-world threat research to craft realistic test cases. Readers will use a dedicated lab environment to execute attacks common to the modern threat landscape, then consider ways of tuning defenses to detect and prevent the activity.
Along the way, they’ll be introduced to a number of open-source tools for emulating enterprise environments, automating attacks, crafting intelligent alerts, and more. Covers numerous free tools readers could use in their own purple team exercises, offensive frameworks, and defensive technologies.

Alfie Champion is a seasoned cybersecurity specialist who has fostered and developed purple team functions over the last decade, both with internal teams and while consulting with MWR InfoSecurity. With a strong emphasis on research and training fostered at MWR, Alfie has gone on to deliver talks and workshops at some of the industry’s most prestigious conferences, including BlackHat USA, DEF CON, and RSA. More recently, he has co-founded an email security startup, delivr.to.