Automated purple-team project validates Sigma rules using MITRE Caldera. Deploys chained AD credential-access attacks (Kerberoasting, AS-REP Roasting, DCSync) to test detection coverage end-to-end. #tool #PurpleTeam https://github.com/joshuagodwin7929/Purple-Team-Automation
September 26, 2026 at 7:36 AM
Automated purple-team project validates Sigma rules using MITRE Caldera. Deploys chained AD credential-access attacks (Kerberoasting, AS-REP Roasting, DCSync) to test detection coverage end-to-end. #tool #PurpleTeam https://github.com/joshuagodwin7929/Purple-Team-Automation
🔥 "Do not put the C4 in your mouth."
Apparently this needed to be said. Repeatedly.
New episode of This Is Fine - Why Purple Team Is The Team Of The Future
🎧 https://f.mtr.cool/lutkmmiwdy
#Cybersecurity #PurpleTeam
Apparently this needed to be said. Repeatedly.
New episode of This Is Fine - Why Purple Team Is The Team Of The Future
🎧 https://f.mtr.cool/lutkmmiwdy
#Cybersecurity #PurpleTeam
July 2, 2026 at 7:31 PM
🔥 "Do not put the C4 in your mouth."
Apparently this needed to be said. Repeatedly.
New episode of This Is Fine - Why Purple Team Is The Team Of The Future
🎧 https://f.mtr.cool/lutkmmiwdy
#Cybersecurity #PurpleTeam
Apparently this needed to be said. Repeatedly.
New episode of This Is Fine - Why Purple Team Is The Team Of The Future
🎧 https://f.mtr.cool/lutkmmiwdy
#Cybersecurity #PurpleTeam
Attending Area41 Security Conference in Dübendorf/Zurich (CH)? 🎯 Swing by our booth and check out RAPTR: our open-source collab platform for Purple Team ops. Plan, attack, detect, report. All in one place.
See you there on Thursday/Friday!
@defcon.bsky.social #Area41 #PurpleTeam
See you there on Thursday/Friday!
@defcon.bsky.social #Area41 #PurpleTeam
June 16, 2026 at 5:38 AM
Attending Area41 Security Conference in Dübendorf/Zurich (CH)? 🎯 Swing by our booth and check out RAPTR: our open-source collab platform for Purple Team ops. Plan, attack, detect, report. All in one place.
See you there on Thursday/Friday!
@defcon.bsky.social #Area41 #PurpleTeam
See you there on Thursday/Friday!
@defcon.bsky.social #Area41 #PurpleTeam
There is an irony that despite my offensive background, the only cyber security discipline I don't hold current certs for is offense.
#purpleteam
#purpleteam
June 9, 2026 at 7:56 PM
There is an irony that despite my offensive background, the only cyber security discipline I don't hold current certs for is offense.
#purpleteam
#purpleteam
Nice technique and a generalised reminder that once attackers get to uid=0, all bets are off:
https://github.com/MatheuZSecurity/UnhookingLinuxEdr
#linux, #purpleteam
https://github.com/MatheuZSecurity/UnhookingLinuxEdr
#linux, #purpleteam
GitHub - MatheuZSecurity/UnhookingLinuxEdr: Attacking the cleanup_module function of a kernel module
Attacking the cleanup_module function of a kernel module - MatheuZSecurity/UnhookingLinuxEdr
github.com
May 28, 2026 at 6:50 PM
Nice technique and a generalised reminder that once attackers get to uid=0, all bets are off:
https://github.com/MatheuZSecurity/UnhookingLinuxEdr
#linux, #purpleteam
https://github.com/MatheuZSecurity/UnhookingLinuxEdr
#linux, #purpleteam
🔴🔵 Purple Teaming bridges the gap between attackers and defenders.
Finding vulnerabilities isn’t enough —
your team must learn how attacks actually bypass detection.
👉 7asecurity.com/blog/2026/05...
#CyberSecurity #PurpleTeam #PenTesting
Finding vulnerabilities isn’t enough —
your team must learn how attacks actually bypass detection.
👉 7asecurity.com/blog/2026/05...
#CyberSecurity #PurpleTeam #PenTesting
What Is Purple Team Cybersecurity and Why Do You Need It
Purple Team cybersecurity combines offensive and defensive strategies. Learn how this approach finds gaps that siloed teams miss and when you need it.
7asecurity.com
May 19, 2026 at 12:21 PM
🔴🔵 Purple Teaming bridges the gap between attackers and defenders.
Finding vulnerabilities isn’t enough —
your team must learn how attacks actually bypass detection.
👉 7asecurity.com/blog/2026/05...
#CyberSecurity #PurpleTeam #PenTesting
Finding vulnerabilities isn’t enough —
your team must learn how attacks actually bypass detection.
👉 7asecurity.com/blog/2026/05...
#CyberSecurity #PurpleTeam #PenTesting
[meta]
I wonder how many offensive folks have done IR for ILOVEYOU, SFPs, an MPLs infrastructure, a mainframe, an entire bank and busses amongst other things.
#purpleteam
I wonder how many offensive folks have done IR for ILOVEYOU, SFPs, an MPLs infrastructure, a mainframe, an entire bank and busses amongst other things.
#purpleteam
May 12, 2026 at 5:43 PM
[meta]
I wonder how many offensive folks have done IR for ILOVEYOU, SFPs, an MPLs infrastructure, a mainframe, an entire bank and busses amongst other things.
#purpleteam
I wonder how many offensive folks have done IR for ILOVEYOU, SFPs, an MPLs infrastructure, a mainframe, an entire bank and busses amongst other things.
#purpleteam
iT4iNT SERVER Your Purple Team Isn't Purple — It's Just Red and Blue in the Same Room VDS VPS Cloud #CyberSecurity #RedTeam #BlueTeam #PurpleTeam #InfoSec
Your Purple Team Isn't Purple — It's Just Red and Blue in the Same Room
Defending a network at 2 am looks a lot like this: an analyst copy-pasting a hash from a PDF into a SIEM query. A red team script is being rewritten by hand so the blue team can use it. A patch waiting on a change-approval window that's longer than the exploitation window itself.
Nobody in that chain is incompetent. Every human is doing their job correctly. The problem is the system, its
dlvr.it
May 11, 2026 at 12:13 PM
iT4iNT SERVER Your Purple Team Isn't Purple — It's Just Red and Blue in the Same Room VDS VPS Cloud #CyberSecurity #RedTeam #BlueTeam #PurpleTeam #InfoSec
🦖 Meet RAPTR: our new open source platform for red and purple team collaboration. Plan engagements, document attacks and detections, evaluate results, and generate reports, all API-driven. Beta is live, feedback welcome! #PurpleTeam
blog.compass-security.com/2026/05/intr...
blog.compass-security.com/2026/05/intr...
May 11, 2026 at 9:13 AM
🦖 Meet RAPTR: our new open source platform for red and purple team collaboration. Plan engagements, document attacks and detections, evaluate results, and generate reports, all API-driven. Beta is live, feedback welcome! #PurpleTeam
blog.compass-security.com/2026/05/intr...
blog.compass-security.com/2026/05/intr...
🚨 Cross‑Session Activation is a detection gap hiding in plain sight.
💡 The technique abstract below highlights the minimum viable signals for defenders.
💭 Interesting to know if this technique is part of your threat emulation library.
#detectionengineering #purpleteam #blueteam
💡 The technique abstract below highlights the minimum viable signals for defenders.
💭 Interesting to know if this technique is part of your threat emulation library.
#detectionengineering #purpleteam #blueteam
May 7, 2026 at 1:12 PM
🚨 Cross‑Session Activation is a detection gap hiding in plain sight.
💡 The technique abstract below highlights the minimum viable signals for defenders.
💭 Interesting to know if this technique is part of your threat emulation library.
#detectionengineering #purpleteam #blueteam
💡 The technique abstract below highlights the minimum viable signals for defenders.
💭 Interesting to know if this technique is part of your threat emulation library.
#detectionengineering #purpleteam #blueteam
Accidentally leverage a supply chain attack this week when it turned out that the GitHub org I'd cloned for a cyber exercise was "unofficial" and none of the exercise participants knew who actually owned it although they did recognise the committers. Chaos ensued.
#purpleteam
#purpleteam
April 25, 2026 at 11:06 AM
Accidentally leverage a supply chain attack this week when it turned out that the GitHub org I'd cloned for a cyber exercise was "unofficial" and none of the exercise participants knew who actually owned it although they did recognise the committers. Chaos ensued.
#purpleteam
#purpleteam
Offensive Cases about Credential Guard & Detection Strategies #purpleteam
Credential Guard
Microsoft introduced Credential Guard in Windows 10 (2015) and Windows Server 2016 to prevent credential harvesting from the LSASS process that was abused for years by threat actors. Microsoft used…
ipurple.team
March 17, 2026 at 12:28 PM
Offensive Cases about Credential Guard & Detection Strategies #purpleteam
My talk from @hackfest.bsky.social 2025 in Quebec City has been posted - “Beyond Red vs Blue: Elevating Your Security with Practical Purple Teaming”
Link: youtu.be/2eLh6swsoyQ
#hackfest #purpleteam
Link: youtu.be/2eLh6swsoyQ
#hackfest #purpleteam
Will Summerhill - Beyond Red vs Blue Elevating Your Security with Practical Purple - Hackfest 2025
YouTube video by Hackfest Communication
youtu.be
February 26, 2026 at 1:46 PM
My talk from @hackfest.bsky.social 2025 in Quebec City has been posted - “Beyond Red vs Blue: Elevating Your Security with Practical Purple Teaming”
Link: youtu.be/2eLh6swsoyQ
#hackfest #purpleteam
Link: youtu.be/2eLh6swsoyQ
#hackfest #purpleteam