Hands-On Purple Team Exercises

This course provides hands-on experience in Purple Team Exercises, where participants take on the roles of both the red team and the blue team. By using tools like SCYTHE, Sysmon, and WireShark, attendees will learn to create adversary emulation campaigns, identify Indicators of Compromise, and map adversary behavior to MITRE ATT&CK Tactics. The teaching method involves practical exercises in an isolated environment with a domain controller, member server, and Linux system. This workshop is intended for individuals interested in improving defensive security posture through collaborative red and blue team exercises.