Demystifying Intelligence-Led Red Teaming: What It Is & How to Automate It

No ratings

Presented at InfoSecurityEurope 2019 by

Menachem Shafran

On May 2018, the European Central Bank published the TIBER-EU, a framework for testing financial sector resilience to cyber attacks.TIBER-EU framework puts an emphasis on conducting intelligence-led red teaming tests which mimic the tactics, techniques, and procedures of real hackers who can be a genuine threat. We will discuss the relations between red teaming and threat intelligence, why there is a need to automate these processes and how purple teams can elevate an organisation's security posture.Learning Outcomes:Understand what is Intelligence-led Red Teaming and how Threat Intelligence can improve red team exercisesGain deeper insights into TIBER-EU requirementsReceive guidance on how to automate Intelligence led Red Teaming and why it is neededUnderstand what purple teaming is and how red teams and blue teams can work togetherLearn about technologies that can help organisations perform adversary emulations to mimic real hackers