Lessons Learned from Implementing an Intel-Based Purple Teaming Process

Explore the practical implementation of threat intelligence-based purple teaming within organizational security frameworks through this 27-minute conference talk from RSA Conference. Learn from Carlos Gonçalves, CTI Leader at Banco do Brasil, as he shares real-world experiences and insights gained from integrating purple team methodologies with threat intelligence. Discover how to leverage the MITRE ATT&CK framework as a foundational guide for security testing and adversary simulation exercises. Understand effective strategies for prioritizing Tactics, Techniques, and Procedures (TTPs) when conducting adversary simulations to maximize testing impact. Examine the practical challenges encountered during implementation and learn proven approaches to overcome common obstacles. Gain insights into how purple teaming results can significantly enhance organizational risk assessment capabilities and strengthen overall security posture through data-driven security improvements.