Search results

TEST Purple Team Event

TEST 2 Purple Team Event

Purple Teaming with Cisco XDR for Sentinel

Purple Teaming with Cisco XDR for Sentinel

This instructor led lab will walk attendees through a purple teaming exercise with Cisco XDR. Each attendee will be assigned a pod with test machines and Cisco Security tools predeployed. Starting with red team activities attendees will gain initial access to a victim machine using a phishing email and the proceed to launch payloads using a variety of MITRE TTP's. After running an attack attendees will start blue team activities to review the detections in Secure Endpoint, Secure Firewall, and Cisco XDR. Blue team activities entail sifting through device trajectory and investigating incidents using the XDR toolset. Attendees will experience running an attack and using Cisco Security tools to remediate the threats gaining hands on purple teaming experience.

Training Outline:

1. Blind Eagle Attack Emulation (1 hour)

2. Blue Teaming for Blind Eagle Attack (1 hour)

3. Q&A (30 mins) 

Purple Team Train the Trainer

This instructor led lab will walk attendees through a purple teaming exercise with Cisco XDR. Each attendee will be assigned a pod with test machines and Cisco Security tools predeployed. Starting with red team activities attendees will gain initial access to a victim machine using a phishing email and the proceed to launch payloads using a variety of MITRE TTP's. After running an attack attendees will start blue team activities to review the detections in Secure Endpoint, Secure Firewall, and Cisco XDR. Blue team activities entail sifting through device trajectory and investigating incidents using the XDR toolset. Attendees will experience running an attack and using Cisco Security tools to remediate the threats gaining hands on purple teaming experience.

Training Outline:

1. Introduction (15 mins)
2. Blind Eagle Attack Emulation (1 hour)
3. Blue Teaming for Blind Eagle Attack (1 hour)
4. Q&A and Feedback (30 mins) 

Purple Teaming With Cisco XDR Workshop - October 8

This instructor led lab will walk attendees through a purple teaming exercise with Cisco XDR. Each attendee will be assigned a pod with test machines and Cisco Security tools predeployed. Starting with red team activities attendees will gain initial access to a victim machine using a phishing email and the proceed to launch payloads using a variety of MITRE TTP's. After running an attack attendees will start blue team activities to review the detections in Secure Endpoint, Secure Firewall, and Cisco XDR. Blue team activities entail sifting through device trajectory and investigating incidents using the XDR toolset. Attendees will experience running an attack and using Cisco Security tools to remediate the threats gaining hands on purple teaming experience.

Training Outline:

1. Introduction (15 mins)
2. Blind Eagle Attack Emulation (1 hour)
3. Blue Teaming for Blind Eagle Attack (45 mins)

Purple Teaming with Cisco XDR - November 13

This instructor led lab will walk attendees through a purple teaming exercise with Cisco XDR. Each attendee will be assigned a pod with test machines and Cisco Security tools predeployed. Starting with red team activities attendees will gain initial access to a victim machine using a phishing email and the proceed to launch payloads using a variety of MITRE TTP's. After running an attack attendees will start blue team activities to review the detections in Secure Endpoint, Secure Firewall, and Cisco XDR. Blue team activities entail sifting through device trajectory and investigating incidents using the XDR toolset. Attendees will experience running an attack and using Cisco Security tools to remediate the threats gaining hands on purple teaming experience.

Training Outline:

1. Introduction (15 mins)
2. Blind Eagle Attack Emulation (1 hour)
3. Blue Teaming for Blind Eagle Attack (1 hour)
4. Closing and Q&A (15 mins)

Purple Teaming TEST

This instructor led lab will walk attendees through a purple teaming exercise with Cisco XDR. Each attendee will be assigned a pod with test machines and Cisco Security tools predeployed. Starting with red team activities attendees will gain initial access to a victim machine using a phishing email and the proceed to launch payloads using a variety of MITRE TTP's. After running an attack attendees will start blue team activities to review the detections in Secure Endpoint, Secure Firewall, and Cisco XDR. Blue team activities entail sifting through device trajectory and investigating incidents using the XDR toolset. Attendees will experience running an attack and using Cisco Security tools to remediate the threats gaining hands on purple teaming experience.

Training Outline:

Introduction (15 mins)

Blind Eagle Attack Emulation (1 hour)

Blue Teaming for Blind Eagle Attack (1 hour)

Closing and Q&A (15 mins)

Purple Teaming with Cisco XDR - November 20

This instructor led lab will walk attendees through a purple teaming exercise with Cisco XDR. Each attendee will be assigned a pod with test machines and Cisco Security tools predeployed. Starting with red team activities attendees will gain initial access to a victim machine using a phishing email and the proceed to launch payloads using a variety of MITRE TTP's. After running an attack attendees will start blue team activities to review the detections in Secure Endpoint, Secure Firewall, and Cisco XDR. Blue team activities entail sifting through device trajectory and investigating incidents using the XDR toolset. Attendees will experience running an attack and using Cisco Security tools to remediate the threats gaining hands on purple teaming experience.

Training Outline:

1. Introduction (15 mins)
2. Blind Eagle Attack Emulation (1 hour)
3. Blue Teaming for Blind Eagle Attack (1 hour)
4. Closing and Q&A (15 mins)