Purple Team Course FAQ

SANS offers multiple purple team courses that enable information security teams to collaborate and work together more effectively:

• SEC504: Hacker Tools, Techniques, and Incident Handling
• SEC599: Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses
• SEC699: Purple Team Tactics - Adversary Emulation for Breach Prevention & Detection

A common theme you will hear in all these courses is that offense informs defense and defense informs offense. That means both Blue Teamers and Red Teamers will find these courses valuable. The purpose of this brief FAQ is to help you pick which purple team course is right for you!