To Infinity and Beyond: Building Purple Team Test Cases скачать в хорошем качестве

To Infinity and Beyond: Building Purple Team Test Cases

This webinar explores SpecterOps' approach to Purple Teaming. The presenters examine the intricacies of evaluating security controls in the context of User Hunting, a popular attack technique used to discover where high-value users are logged in throughout the network to target their identity. They cover many common mistakes defenders make in designing, testing, and evaluating detection strategies. Topics include understanding the various procedures available to attackers, assessing the difference between tool, modality, and behavior-based detection, designing test cases, calculating probability in the face of uncertainty, and more. If you've ever wondered whether your detection program is ready for battle, this webinar is for you!