Black Hat – ADVERSARY EMULATION & PURPLE TEAMING 2022-8

Black Hat – ADVERSARY EMULATION & PURPLE TEAMING 2022-8 Downloadly IRSpace

Apr 17, 2025 - 20:17 Updated: Aug 17, 2025 - 15:16

0 0

Black Hat – ADVERSARY EMULATION & PURPLE TEAMING 2022-8

ADVERSARY EMULATION & PURPLE TEAMING course. This four-day training course introduces students to the Purple Team Exercise Framework and teaches them the different roles involved in this type of exercise. Students learn to collect Cyber Threat Intelligence (CTI), develop and execute attack simulation programs based on the collected information, and then engage in intrusion detection engineering to identify and remediate undiscovered opportunities. Each day is dedicated to one of the roles, and the course ends with a final project (Capstone) that brings it all together in a purple team exercise. This intermediate level course is designed to expand students’ understanding of the various roles and responsibilities in purple team exercises and is intended for members of red (offense), blue (defense) teams, intelligence analysts, and managers looking to expand their purple team capabilities. , is appropriate.

What you will learn

Purple Team Practice Framework (PTEFv2)
Threat modeling and threat analysis
Assault simulation planning and red team
Adaptive Emulation
Managing and developing capabilities
Evaluating the visibility of log resources
Intrusion detection engineering
Coordinating and conducting purple team training

This course is suitable for people who

Security analysts
Cyber threat intelligence analysts
Members of the red and blue teams
Looking to add more purple team skills to their day job.

ADVERSARY EMULATION & PURPLE TEAMING course specifications

Publisher: Black Hat
Instructor: Chris , Jake Williams, Shawn Edwards, Tim Schulz
Training level: beginner to advanced
Training duration: more than 25 hours

Course headings

Day 1
Introductions
Module 1: Intro to Purple
Module 2: Threat/Adversary Emulation
Module 3: Intro to Threats
Module 4: Threat Modeling
Module 5: Threat Analysis
Module 6: Emulation Plans
Day 2
Module 7: Exercise Methodologies
Module 8: Testing Tools
Module 9: Capability Management
Module 10: Capability Development
Module 11: Adaptive Emulation
Module 12: Exercise Execution
Day 3
Module 13: Strategic Drivers of Detection Engineering
Module 14: Detection Engineering Process
Module 15: Common Detection Opportunity Types
Day 4:
Module 16: An Exercise Framework (PTEF)
Module 17: Capstone Prep
Capstone Project (CTF)

Black Hat – ADVERSARY EMULATION & PURPLE TEAMING 2022-8