One of us is a replicant and it might be me! But it sounds more like you’re describing a Purple team [1], where the compliance and sec ops teams work together

One of us is a replicant and it might be me! But it sounds more like you’re describing a Purple team [1], where the compliance and sec ops teams work together with vulnerability researchers and pen testers to perform attack surface analysis and develop threat detections. In my experience Red teams generally perform adversary emulation using a certain amount of surprise and deception, and attack your defenses in depth with a _little_ help from inside (if needed). Essentially an outside group paid well to try and steal your lunch. Liked and subscribed, and thanks for the comments and all the work. Edit: Let’s split the difference, I’ll call it magenta, and flip this here turtle on its back. Why did I do that? [1] https://www.sans.org/purple-team/course-faq/?msc=purple-team-lp https://www.sans.org/purple-team/course-faq/?msc=purple-team... (because reddit was down)