Purple On My Mind
Presents open-source tooling and methodologies to measure defensive coverage and test detection engineering pipelines.
Summary
Adversary Simulation Methodologies
Automated adversary simulation allows security teams to rigorously test and measure their defensive postures across production environments without introducing unnecessary risk.
Evaluating Event Pipelines and Detection Rules
Testing must extend beyond individual alerting rules to evaluate the entire pipeline, from initial endpoint telemetry ingestion to log parsing and alert dispatch.
Open-Source Tooling for Continuous Validation
The authors demonstrate custom open-source tools developed to execute controlled attack techniques at minimal cost, ensuring measurable improvements in response procedures.
Related talks
Red Team Village·35 min
Erdener Uyan · Gökberk Gülgün
Erdener Uyan and Gökberk Gülgün present an open-source machine learning framework for generating dynamic, automated red team attack scenarios.
Red Team Village·45 min
Nicolas Mattiocco
Nicolas Mattiocco explores how automated adversary emulation feeds directly into Security Operations Center (SOC) playbooks and SOAR detection engineering.
Adam Pennington · Sydney Marrone · Lauren Proehl
How modern security teams transition from siloed operations to unified, intelligence-driven purple teaming.