Skip to main content

Preview build: sign-in and grading run on the server. MFA is not enabled, and storage is in server memory so it does not survive a restart.

LearnDefend
Create account

This course is coming soon. It is not yet open for enrollment, and no payment is taken.

The outline and outcomes below reflect what this course will cover. Check back soon.

Coming soonAdvanced

Purple Teaming: Attack & Detect

Emulate a technique, then build the detection that catches it.

By LearnDefend Offensive Lab · Purple Team

About this course

Close the loop between offense and defense: safely emulate ATT&CK techniques in a lab, observe the telemetry they generate, and engineer and validate the detection — the fastest way to real coverage.

What you'll learn

  • Safely emulate ATT&CK techniques in a controlled lab.
  • Observe and interpret the telemetry an attack produces.
  • Engineer and validate a detection against it.

Course outline

  1. 1Purple team method and safety
  2. 2Emulating techniques
  3. 3Observing telemetry
  4. 4Building and validating detection

Prerequisites

  • Detection engineering basics and comfort with a lab environment.
Purple Teaming: Attack & Detect | LearnDefend