Operating Cadence
Bi-weekly micro-exercises: choose 1–2 techniques, execute, capture telemetry gaps, draft detection, validate in staging, promote. This feeds directly into the Detection Engineering Playbook.
Roles & Responsibilities
Offense crafts scenario & success conditions; defense instruments telemetry & authors analytic; facilitator tracks metric deltas.
Detection Engineering Loop
Each exercise must end with either production analytic, backlog refinement, or capability ticket (telemetry/enrichment).
Coverage Dashboard Integration
Auto-update ATT&CK coverage and hypothesis status directly from exercise issue templates.
Metrics
Exercise to production detection conversion %, false negative reduction trend, lateral movement dwell delta, analytic retirement ratio.
Sources & Further Reading
MITRE ATT&CK.
Atomic Red Team.
Purple Team Exercise Framework references.
Poin penting
Smaller, fast loops outperform quarterly mega-exercises for sustained uplift.
Bacaan terkait
Keamanan Siber
Ingin sistem Anda ditinjau?
Ceritakan sistem dan deadline Anda. Kami akan usulkan scope dan langkah berikutnya.