Purple Concepts: Bridging The Gap

Earn your Purple Pilot status by discovering Red and Blue Team tools and understanding how to bridge them with Purple Concepts, then jump around the stars learning how to apply actual Tactics, Techniques, and Procedures (TTPs) in emulator routes featuring real-life threat actors. This Purple Team digital poster is packed with resources, references, and examples on real emulation plans for FIN6, APT28, and APT33. You'll find steps for initial foothold, network propagation, and action on objectives, plus tons of material on Purple Team concepts.

Learn how to best use this interactive poster with SANS Instructors Erik Van Buggenhout and Jorge Orchilles here: Purple Team Interactive Poster Walkthrough

April 20, 2022

Login to download

Related Content

Offensive Operations, Pen Testing, and Red Teaming, Penetration Testing and Red Teaming

January 31, 2024

Continuous Purple Teaming: A Practical Approach for Strengthening Your Offensive Capabilities

This post will guide you through actionable strategies to implement adversary emulation effectively with some concrete examples.

Jeroen Vandeleur

Purple Team, Offensive Operations, Pen Testing, and Red Teaming

Purple Teaming and Threat-Informed Detection Engineering

In the first two webcasts of this Purple Team series, we covered how to run your first Purple Team Exercise and how to Operationalize your Purple Team. You may have noticed that a common process in Purple Teaming is detection engineering. In this blog, we go into the items discussed in our third...

Jorge Orchilles

Purple Team, Offensive Operations, Pen Testing, and Red Teaming

Building an Internal Red Team? Go Purple First

If you are asked to build an internal red team program today, start with a Purple Team Exercise to foster collaboration across stakeholders early on.

Jorge Orchilles