Webcast: Atomic Purple Team Framework and Life Cycle

Jul 30, 2020

Ask episode

Chapters

Transcript

Episode notes

Jordan Drysdale & Kent Ickler // Jordan and Kent are back again to continue strengthening organizations’ information security human capital (That’s all you folks!). Organization Leadership and Security Practitioners can gain understanding on the potential designed-to-fail Purple Teams initiatives never reached their full potential. The Duo reviews how systemic organizational career pathing created an insoluble Red vs Blue dichotomy. MORE IMPORTANTLY: The team is announcing a recipe for Purple Team Wins: The Atomic Purple Team (Lifecycle) Framework Organizations struggling to efficiently leverage the skillsets of all information security staff will benefit from considering the Atomic Purple Team Lifecycle Framework’s business-driven workflow. The workflow takes its roots from tested continuous improvement frameworks like ISO9001, ISO27001, Six Sigma, and the like. Watch how a methodical balance of risk analysis, attack, hunt and defend methodologies, and business considerations can effectively and continually improve an organizations’ security posture. As an added bonus, the framework incorporates concepts of Human Capital Management and knowledge-flow methodologies to encourage tacit knowledge exchange to further organic growth of the skillsets of all those involved in the Atomic Purple Team framework. But wait, there’s more! Budget headaches? Learn how the Atomic Purple Team framework’s methodical flow also aligns to natural business operations management and reporting. The framework provides a clear path to cabinet-approved Purple Team budget appropriations to ensure long term security posture improvement. Lastly, Jordan and Kent will demonstrate the Atomic Purple Team Lifecycle in action by running complete live Attack and Hunt/Defend lifecycle(s), all the way to risk management and budgetary thoughts. Join the Black Hills Information Security Discord discussion server — https://discord.gg/aHHh3u5 Need slides and much more — https://github.com/DefensiveOrigins/A… 0:00 – Family Stories 1:07 – Atomic Purple Team Framework

(00:00) - Family Stories
(01:07) - Atomic Purple Team Framework
(03:28) - Executive Problem Statement
(04:41) - Red Team, Blue Team, Purple Team
(07:18) - Who / What is APT?
(09:22) - Atomic Purple Team Lifecycle
(18:18) - 1. Threat / Risk Assessment (Ingest) Types
(19:59) - 2. Planning — What are the Tools
(20:50) - 3. Attack / Execute / Engage
(21:37) - 4. Hunt and Defend
(22:01) - 5. Adjust & Harden
(23:14) - 6. Reporting and Request for Deployment
(27:07) - Lifecycles Start in Development
(28:15) - Lifecycles End in Production
(28:43) - APT Lab INfrastructure
(29:48) - Off-Roading: Lab Demo
(33:21) - Lifecycle Walkthrough — Goal Setting
(34:50) - Purple Team Lifecycle Walkthrough
(44:02) - Hunt and Defend Methodology
(45:02) - Adjusting to Threat
(47:21) - APTLC Playbook
(48:49) - The Report
(53:15) - Lessons Learned