Technical Pen Testing - Red and Blue Working Together
Explore a comprehensive conference talk from Louisville InfoSec 2016 featuring Martin Bos on the topic of pen testing and the collaboration between red and blue teams. Delve into the current state of security, the role of red teams, and common vulnerabilities. Learn about blue team responsibilities, remediation strategies, and the importance of cyber hygiene. Discover the evolution of penetration testing, the concept of purple teaming, and how to effectively protect against adversaries. Gain insights on improving vulnerability management, implementing compensating controls, and developing appropriate risk appetites. Acquire practical tips on password policies, easy mitigations, and the benefits of hiring internal pentesters. Understand the value of researching vendors and maximizing the benefits of security assessments in this informative one-hour presentation.