Red, blue and purple teams: testing defence through the attacker’s eyes

1Introduction

Red teams emulate real attackers to test detection and response, not just list vulnerabilities.

2Discussion

Blue teams defend, measured by MTTD and MTTR.

Purple teaming runs techniques jointly and improves detections on the spot.

MITRE ATT&CK provides the shared language and coverage map.

3Conclusion

Regular exercises on realistic banking scenarios set security investment priorities.