Wargames - Purple teaming with Kali Purple

It is no longer sufficient to respond to cyber threats through writing security policies and auditing controls against generic standards.

Long gone is the time where a mature patch management process was sufficient, or even achievable.

Effective cybersecurity now requires the development of real world attack detection and response skills, as well as experience in employing those skills to defeat cyber attacks.

This level of cybersecurity attack preparedness is difficult to achieve and even harder to maintain.

Kali Purple SOC-in-a-Box is a "cyber simulation centre", based entirely on free and open source software, methodologies, and frameworks to provide individuals and organisations an environment to:

Technically, the Kali Purple cyber simulation centre is a virtual data centre with virtual servers, virtual networks, and application containers entirely built with industry leading free and open source software. It is built as an enterprise grade security and technology stack using virtualised and containerised business and infrastructure systems. Its security capability includes:

In addition to a training and current state testing environment, the cyber simulation centre provides a trial environment for:

In this talk, the speaker will present the reference architecture for the cyber simulation centre, their experiences with installing and maintaining it as an open-source solution and will showcase its use in scripting and running cyber attacks, monitoring & SIEM analytics, as well as threat hunting.