Here are six minutes of highlights from “Hacking Purple Teaming: An hour of critical thinking of how to increase collaboration between red and blue teams”.
Our guest for this discussion were:
- Dan DeCloss (@wh33lhouse), CEO, PlexTrac
- Tim Scanlin, Splunk & security engineer, U.S. Customs and Border Protection
Got feedback? Join the conversation on LinkedIn.
HUGE thanks to our sponsor PlexTrac
Best Bad Ideas
Congrats to Brandon Pelfrey, business development, PlexTrac for winning this week’s Best Bad Idea!
Other honorable mentions go to:
“Hire Grimace and the Hamburgler as your purple team instructors.” – Dutch Schwartz, principal security specialist, AWS
“Forget to book a red team.” – Justin Wood
“Have the red team and blue team sacrifice a team member every time the purple team beats them.” – Craig Hurter, director security operations, Colorado Governor’s Office of Information Technology
“Make red team use a dial up modem.” – Justin Wood
“Implement purple teaming early rather than waiting for “more maturity” in your cyber program.” – Brandon Pelfrey, business development, PlexTrac
“Don’t treat the blue team as a stepping stone to get into offensive security in your org (keep top talent on both sides).” – Brandon Pelfrey, business development, PlexTrac
“Enlist representatives from the business to be part of the blue team (security is everyone’s responsibility…. remember?).” – Sean Kelly, manager – enterprise information risk assurance, Highmark Blue Cross Blue Shield of Western New York