D4 · Operations

What is purple teaming?

Purple teaming combines red team (attackers) and blue team (defenders) working collaboratively — red shares attack details immediately so blue can improve detection and response.
Traditional red team: full adversarial simulation, blue team unaware. Purple team: collaborative, real-time knowledge sharing. Purple teaming is more cost-effective at improving defenses quickly. ATT&CK-based purple team exercises are popular.
← Back to Glossary Practice Questions →