CactusCon

CactusCon13
February 14-15, 2025
Mesa, AZ

Active Defense Scenarios: A Quarterly Intelligence Driven Purple Team Exercise

Track 3
5 Feb 2022 3:00 PM - 4:00 PM

The speakers have an abundance of experience working with organizations across many different sectors and regions. Something they have seen be the most effective use of tactical Threat Intelligence and Purple Teaming is the concept of “Active Defense Exercises”. “Active Defense Exercises” involve the creation of realistic and timely, adversary specific, kill chain scenarios. During this talk the speakers will discuss the best approaches for scenario selection. The speakers will then pivot to discuss the nuances of liaising Purple Team testing to determine the level of effectiveness of the organization’s security controls. The speakers will also discuss strategies for engaging internal security teams and detail the most effective mechanisms for conveying the “Active Defense Exercise” lessons learned to technical and non-technical stakeholders.

Robert Moody
Security is a team sport, do not drop the ball!

Robert A. Moody is a cyber threat intelligence and incident response expert, currently working as Cyber Threat Intelligence Manager at The Home Depot. Robert leads a team charged with monitoring the Threat Landscape for all of North of America. Robert holds the following certifications; Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), Certified Data Privacy Solutions Engineer (CDPSE), and a Crest Registered Threat Intelligence Analyst (CRTIA). He a Master’s degree in Cybersecurity from ie University, an Executive Master’s in Business Administration (EMBA) from Quantic School of Business and Technology. His background is in defending critical infrastructure, including manufacturing, banking, finance, telecommunication, retail, and energy.​

Robin Williams
Purple team all the things...
@bfuzzy1

Robin Williams is an offensive and defensive security expert, currently working as a Staff Systems Engineer on the Red Team at The Home Depot. Robin leads all of the Purple Team efforts as a sub-team under the Red Team. He has a background working as a security consultant and has consulted across multiple industries including banking, finance, telecommunications, and retail.