Organizing a Week-Long, In-Person Purple Team Adversary Emulation Exercise

As highly technical infosec professionals, you may not realize all the non-technical considerations that go into organizing a week-long, in-person Purple Team Adversary Emulation Exercise. In this talk we will cover a number of items to consider from the non-technical (selling the exercise to senior management, obtaining budget, planning travel, comfortable conference room, breaks, timing, fun, etc) to the technical (identify TTPs, set up production systems, accounts, not introduce risk, etc). This talk will incorporate lessons learned from other Purple Team exercises performed by a number of organizations so that you can make your first one the most successful!