How Purple Teaming Made Me A Better Blue Teamer
What years on the blue side and a stint in purple teaming changed about how I defend.
6 min
Tag: Purple Team
Posts
4 entriesThreat Hunting Toolset and Operational Security Considerations
Building an open source threat hunting toolset, and the opsec that keeps the adversary from noticing you are hunting.
Dealing With Advanced Windows Defender Bypass Attempts
Detecting C2 traffic and fileless malware when Defender is bypassed, and what to harden on the endpoint and in PowerShell.
Analysing A Security Alert 101
How I work through a security alert: what to check first, what context to pull in, and when to escalate.