Atomic Bird Goes Purple #1

Throughout this module, you have built a solid foundation in threat emulation. You learned the core concepts and processes behind emulation exercises, explored how threat modeling helps identify and prioritize the threats that matter most, and got hands-on with Atomic Red Team to emulate real adversary techniques and observe how defenses respond to them.

This room is where you start putting that knowledge into practice. Across this room and the next, you will take everything from the previous rooms and apply it in practical, scenario-driven environments. The focus is on going beyond the defaults and basics to enhance the impact of Purple Team, Threat Emulation, and Detection Engineering exercises. You will emulate real adversarial tactics, hunt for attacker behavior in your environment, and experience what a purple teaming exercise looks like in action.

Learning Objectives

• Gain hands-on threat emulation experience.
• Familiarise yourself with artefacts created by adversary tactics and techniques.
• Experience emulation and detection to improve your overall security defences.

Room Prerequisites

It is recommended to go through the prior rooms of this module:

• Threat Emulation Module

Connecting to the Machine

Before moving forward, start your lab machine by clicking the Start Lab Machine button below. The machine will open in split view and will need about 2 minutes to fully boot. In case you can not see it, click the Show Split View button at the top of the page.

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting the Target Machine, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.

Lab machine

Status:Off

Start Lab Machine