The Always-On Purple Team: An Automated CI/CD for Detection Engineering

Tuesday, 03 Sep 2024 12:00PM EST (03 Sep 2024 16:00 UTC)
Speakers: Stephen Sims, Erik Van Buggenhout

Join Stephen Sims and Erik Van Buggenhout as they present, "The Always- On Purple Team: An Automated CI/CD for Detection Engineering", which they previously introduced at RSA Conference 2024. During this webcast, they will share tips on building the always-on purple team! This session will present an innovative architecture that merges industry-leading SOC technologies, SIEM/XDR, SOAR, BAS, and a pinch of ChatGPT. The result is a detection engineering CI/CD pipeline that can automatically create, test, and deploy detection analytics. The proof is in the pudding: Live demo included!

Login to Register

Related Content

HackFest Hollywood 340x340.png

Offensive Operations, Pen Testing, and Red Teaming

October 28, 2024

A Visual Summary of SANS HackFest Hollywood Summit 2024

SANS Hollywood HackFest Summit - Check out these graphic recordings of the talks created in real-time.

Offensive Operations, Pen Testing, and Red Teaming

August 21, 2017

Pen Test Poster: "White Board" - Bash - Website Cloner

According to Verizon's 2016 Data Breach Investigations Report 30 percent of phishing messages get opened by targeted users and 12 percent of those users click on the malicious attachment or link. That means, on average, every 4 phished users should (statistically) yield one click. Developing a...

Offensive Operations, Pen Testing, and Red Teaming

February 21, 2017

Pen Test Poster: "White Board" - Bash - Check Service Every Second

If you've had the opportunity to take SANS 560, Network Penetration Testing and Ethical Hacking, chances are you were exposed to the Pentester's Pledge. The pledge, for those who aren't familiar is: "I , do hereby pledge to use psexec to exploit Windows target machines after I have gained admin...