Mouse in the house, operationalizing purple teaming

No ratings

Presented at The GrrCON Cyber Security Summit and Hacker Conference 2024 by

Trevor Olson

Not many places are blessed to have an internal penetration testing team and an internal threat hunting team and we wanted to take advantage of that here at Rocket Companies. What we came up with was Mouse in the House, which at the core is an ongoing purple team engagement between the two teams. This talk will be centered around how we took the two teams that didn’t really interact that much and operationalized the process with the goal of completing two of these engagements per month. The thought process that was used, tooling used for shared reporting and then how we structured our reports so that they would be able to be consumed by folks in the c suite.