- New sample campaigns to get up and running with your purple teaming exercises, including:
- External network testing activities
- Phishing technical defenses (email-based attacks, client-side attacks, malicious attachments)
- Sample scenarios for physical testing (e.g. local laptops/workstations), database intrusion, domain controller tests
- Command-and-control testing
- Data exfiltration testing
- Endpoint persistence methods
- New “Scorecard” dashboard
- Summary of overall risk score, most effective/least effective defenses per category (e.g. EDR, SIEM, firewall, …)
- Filters on most/least effective outcomes by individual Campaign, Phase, or Attack Patterns (top 5 strengths, top 5 weaknesses)