Enemy Within: Leveraging Purple Teams for Advanced Threat Detection & Prevention

Ground Floor, 10:30 Wednesday In “Enemy Within: Leveraging Purple Teams for Advanced Threat Detection & Prevention,” attendees will learn to bridge the gap between Cyber Threat Intelligence and Offensive Security. We’ll explore the importance of cr...

Ground Floor, 10:30 Wednesday

In “Enemy Within: Leveraging Purple Teams for Advanced Threat Detection & Prevention,” attendees will learn to bridge the gap between Cyber Threat Intelligence and Offensive Security.

We’ll explore the importance of cross-functional collaboration with Detection Engineering and Red Team operations, examining challenges in Threat Intelligence and Purple Team operations.

Addressing common challenges faced by offensive security and threat intel teams, such as securing buy-in from management and improving testing efficiency, we’ll discuss how our teams collaborate to execute realistic operations, fostering a positive relationship between offensive security and threat intel resources.

The presentation will include live demos of real-world adversary examples, like web shells and EvilGinx, and showcase open-source tools for streamlining efforts. By focusing on shared problems, we aim to demonstrate the importance of security investment and gain support from key stakeholders with financial resources and decision-making authority.

We’ll address limitations of existing frameworks that haven’t effectively kept pace with real-world threats and conclude with a showcase of open-sourced tooling created by Meta’s Purple Team to tackle the issue.

Jayson Grace, Adam Bradbury