Purple Team

With a focus on ensuring that your network defenders (blue team) can identify the Indicators of Compromise (IoCs) generated by Sekuro Offensive Security consultants (Red Team), we walk-through a custom attack simulation so that you can improve detection capabilities by uplifting skills of your staff, tweaking internal tools, and updating incident response processes and procedures.

The typical engagement lifecycle of a Purple Team assessment would include:

• Understanding your existing detection tools, processes and policies;
• Discuss and walkthrough Techniques, Tactics and Procedures (TTPs) relevant to you and an approach on testing them;
• Once agreed, we establish a Rules of Engagement (RoE) and prepare assets and stakeholders for the assessment;
• Collaboratively between Sekuro’s Offensive Security consultants and your network defenders, we step-through testcases so that you can investigate IoCs and we evaluate detection outcomes;
• Throughout testing, all activities and outcomes are documented;
• At the end of the assessment, we provide a risk-based report covering all testcases, the actions performed, detection status and recommendations to improve defences.