Anyone doing purple teaming currently? Looking for recommendations for an automated security validation platform that's aligned to MITRE ATT&CK.

Security & GRC Security Strategy & Roadmap

2.6k views2 Comments

Sort by:

Chief Information Security Officer in Healthcare and Biotech2 years ago

dependabot

Director of Cybersecurity Data and App Protection in Healthcare and Biotech2 years ago

Safebreach performs purple team testing with an automated approach aligned to MITRE ATT&CK.

Content you might like

Blacklisting IPs is not an effective use of the security team’s time.

Strongly agree9%

Agree58%

Neutral15%

Disagree14%

Strongly disagree2%

Other (please specify)

View Results

Which tech conference do you intend to attend in person next year or have already participated in this year, and what motivated your choice?

Read More Comments

What are the challenges and best practices in implementing robust time-sensitive access controls and location-based risk assessments for secure remote work environments?

Which of these areas are you targeting for funding increases in your 2026 cybersecurity budget? (Choose all applicable)

Threat detection & response 48%

Identity & access management 58%

Cloud security 48%

Security awareness training 30%

Other 3%

N/A

View Results

Has anyone drafted an SOW for a cloud-based SIEM with setup, migration, and maintenance? I’m working on a FedRAMP-authorized SIEM SOW, migrating from on-prem Splunk, covering data, searches, alerts, dashboards, and models. Scope includes Environment Setup: Cloud provisioning, configuration, testing. Connectors/Parsers: Custom data source integration. Content Development: Rules, use cases, threat feeds. Performance Tuning: Query/index optimization. Runbooks: Operational procedures. Also required: 24x7 support, maintenance, lifecycle and application management, role-based training, and documentation. Must comply with NIST SP 800-53, CJIS, and FedRAMP Moderate+. Goal: Secure, scalable SIEM for rapid deployment. I may be missing elements, so suggestions are welcome. Please share redacted SOWs or tips if possible.