You're reading from Purple Team Strategies Enhancing global security posture through uniting red and blue teams with adversary emulation

Product type Paperback

Published in Jun 2022

Publisher Packt

ISBN-13 9781801074292

Length 450 pages

Edition 1st Edition

Tools

Kali Linux

Concepts

Penetration Testing

Authors (4):

David Routin

Samuel Rossier

Simon Thoores

Michael Molho

View More author details

Table of Contents (20) Chapters

Preface

1. Part 1: Concept, Model, and Methodology

2. Chapter 1: Contextualizing Threats and Today's Challenges FREE CHAPTER

3. Chapter 2: Purple Teaming – a Generic Approach and a New Model

4. Chapter 3: Carrying out Adversary Emulation with CTI

5. Chapter 4: Threat Management – Detecting, Hunting, and Preventing

6. Part 2: Building a Purple Infrastructure

7. Chapter 5: Red Team Infrastructure

8. Chapter 6: Blue Team – Collect

9. Chapter 7: Blue Team – Detect

10. Chapter 8: Blue Team – Correlate

11. Chapter 9: Purple Team Infrastructure

12. Part 3: The Most Common Tactics, Techniques, and Procedures (TTPs) and Defenses

13. Chapter 10: Purple Teaming the ATT&CK Tactics

14. Part 4: Assessing and Improving

15. Chapter 11: Purple Teaming with BAS and Adversary Emulation

16. Chapter 12: PTX – Purple Teaming eXtended

17. Chapter 13: PTX – Automation and DevOps Approach

18. Chapter 14: Exercise Wrap-Up and KPIs

19. Other Books You May Enjoy

Vulnerability scanners

Vulnerability scanning activities are a key part of the work of a blue team. It is also usually the starting point of the vulnerability management process. As usual, there are commercial and free solutions. Currently, the main free solution is OpenVAS, which is still maintained with updated vulnerability feeds. One important drawback of the free OpenVAS version is that it receives update feeds with a 14-day delay, which could be a real issue depending on the criticality of our systems. OpenVAS also has a kind of distributed mode, which means we can have a central server (manager) and remote scanners that will perform the scans in remote LANs and only send the results to the manager for centralization. The famous Network Mapper (Nmap) also offers vulnerability scanning functionalities thanks to the Nmap Scripting Engine (NSE) scripts offered by the community. This last solution may be sufficient to detect specific vulnerabilities in our organization (active hunting...

The rest of the chapter is locked

You're reading from Purple Team Strategies Enhancing global security posture through uniting red and blue teams with adversary emulation

Table of Contents (20) Chapters

Vulnerability scanners

Unlock this book and the full library FREE for 7 days

Authors (4)

Personalised recommendations for you