Practical Purple Teaming

The Art of Collaborative Defense

Alfie Champion (Autor)

Buch | Softcover

336 Seiten

2025
No Starch Press,US (Verlag)
978-1-7185-0428-8 (ISBN)

Artikel merken

Many organizations have chosen to forgo traditional security tests in favour of collaborative assessments - or 'purple team' tests, for the way they combine offensive ('red team') and defensive ('blue team') elements - in which offensive and defensive teams work together to measure and improve the organization's resilience to attacks. Practical Purple Teaming outlines common purple team methodologies, offensive and defensive frameworks, and real-world threat research to craft realistic test cases. Readers will use a dedicated lab environment to execute attacks common to the modern threat landscape, then consider ways of tuning defences to detect and prevent the activity. Along the way, they'll be introduced to a number of open-source tools for emulating enterprise environments, automating attacks, crafting intelligent alerts, and more. Covers numerous free tools readers could use in their own purple team exercises, offensive frameworks, and defensive technologies.

Alfie Champion is a seasoned cybersecurity specialist who has fostered and developed purple team functions over the last decade, both with internal teams and while consulting with MWR InfoSecurity. Champion has delivered talks and workshops at some of the industry’s most prestigious conferences, including BlackHat USA, DEF CON, and RSA.

Introduction

Part I: How Purple Teaming Works
Chapter 1: The Basics of Purple Teaming
Chapter 2: Offensive and Defensive Frameworks
Chapter 3: The Atomic Methodology
Chapter 4: The Scenario-based Methodology

Part II: Attack Emulation and Detection Lab
Chapter 5: Enviromnent Setup
Chapter 6: Collecting Telemetry
Chapter 7: Network Scanning and Event Tracing
Chapter 8: Living-off-the-Land with the Atomic Red Team Library
Chapter 9: Active Directory Recon with the Caldera Framework
Chapter 10: Domain Compromise with the Mythic Framework

Part III: Organizing an Exercise
Chapter 11: Reporting and Tracking
Chapter 12: Implementing Purple Teaming

Appendix A: Supplemental Tables

Erscheinungsdatum	08.10.2025
Verlagsort	San Francisco
Sprache	englisch
Maße	178 x 236 mm
Themenwelt	Informatik ► Betriebssysteme / Server ► Windows
	Informatik ► Netzwerke ► Sicherheit / Firewall
	Mathematik / Informatik ► Informatik ► Software Entwicklung
ISBN-10	1-7185-0428-4 / 1718504284
ISBN-13	978-1-7185-0428-8 / 9781718504288
Zustand	Neuware