Purple Team Courses and Certifications

RSA Conference

The Always-On Purple Team - AI Agents on the Loose

Discover how AI agents autonomously execute purple teaming through collaborative threat intelligence, adversary emulation, and detection engineering with live demos and code sharing.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

DEFCONConference

Letthemin - Facilitating High Value Purple Teams Using Assumed Compromise

Master a refined methodology for Purple Team engagements using Assumed Compromise approach to enhance detection capabilities and organizational cyber resilience.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

RSA Conference

Intro to Purple Team - Cyber Threat Intelligence, Attack, Detect, Respond

Learn how purple teams use cyber threat intelligence, attack emulation, and detection engineering to help organizations detect and respond to attacks.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Hands-On Purple Team Exercises

A hands-on purple team workshop where learners emulate adversary behavior, detect indicators of compromise, and map tactics, techniques, and procedures to MITRE ATT&CK.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

RSA Conference

The Always-On Purple Team: Automated CI/CD for Detection Engineering

Innovative architecture for automated detection engineering CI/CD pipeline, merging SOC technologies, SIEM/XDR, SOAR, BAS, and ChatGPT. Includes live demo of creating, testing, and deploying detection analytics.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

OWASP Foundation

Purple Team Strategies for Application Security

Explore purple team strategies for application security, blending red and blue team approaches to enhance vulnerability testing, automation, and security infrastructure integration.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

nullcon

Red, Purple, and Blue Team Activity Using Azure

Hands-on red, blue, and purple team activities in Azure, including vulnerable application deployment, attack routing, detection, and prevention.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Detection Engineering Professional:

Simulate attacks in Windows Active Directory, investigate Event Logs and Sysmon telemetry, and write, tune, and validate Elastic Security KQL detection rules.

• TrainSec
• Self-Paced
• Paid Course

Threat Detection and Security Engineering

Engineer SIEM detections in Microsoft Sentinel with KQL and MITRE ATT&CK, run purple team exercises, automate SOC playbooks, and protect data with Microsoft Purview DLP.

• Coursera
• 12 weeks, 1 hour a week
• Self-Paced
• Paid Course

Security Onion

Blue, Red, Purple, White - Which Team Are You On?

A Security Onion walkthrough follows a Trojan alert from Snort detection through packet analysis and investigation to response.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Purple Teaming and Adversary Emulation in the Cloud with Stratus Red Team

Explore cloud-native adversary emulation with Stratus Red Team. Learn to identify and reproduce malicious activities in AWS and Kubernetes, enhancing threat detection capabilities for cloud environments.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Objective-See Foundation

ATT&CK-Based macOS Purple Team Operations - Dropping Lotus Bombs

Dive into macOS security with OceanLotus attack emulation techniques, ATT&CK framework implementation, and enterprise-level detection strategies for effective purple team operations.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

RSA Conference

Live Adversary Simulation - Red and Blue Team Tactics

Explores purple teaming through live adversary simulations that connect red-team offense with blue-team defense and create a bidirectional feedback loop.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Malware Protocol Simulations in Distributed Networks

Simulate realistic command-and-control traffic across distributed networks with Tehsat using modern protocols for safe defensive and purple-team exercises.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

BSidesLV

Enemy Within - Leveraging Purple Teams for Advanced Threat Detection and Prevention

Explore cross-functional collaboration between Cyber Threat Intelligence and Offensive Security for advanced threat detection. Learn about realistic operations, live demos, and open-source tools to improve security investment.

• YouTube
• 51 minutes
• Self-Paced
• Free Video