MSSP Workshop: Purple Team Testing & IR Automation

​Join us at Legacy Food Hall in Plano, TX for an intensive, hands-on cybersecurity workshop tailored specifically for MSSPs, MDR providers, and incident response teams!

In this technical deep-dive, industry veterans Ken Westin and Matt Bromiley will guide you through practical implementations that directly address your operational challenges.

Learn how to streamline your Okta security monitoring through purple team exercises, and master automated incident response workflows to dramatically improve your team's efficiency. Discover how to leverage infrastructure as code and automation to scale your security operations while maintaining the high standards your clients expect.

These free workshops provide innovative ways to enhance your service capabilities and include a post-event happy hour for networking with your peers. Space is limited - reserve your spot today.

​Purple Teaming Okta Detections with LimaCharlie
Host: Ken Westin, 1:00-3:00pm
Identity Security Posture Management (ISPM) is a critical component to any organization's security program, particularly in a highly distributed environment. In this hands-on workshop we will show attendees how to onboard Okta logs to the LimaCharlie Security Operations Platform, write detections for key events, and test detections using open source adversary emulation tools. The workshop will be run in an individual lab we will build using a combination of free and open source tools. A basic understanding of YAML and writing detections is helpful but not required.

​Automating Incident Response
Host: Matt Bromiley, 3:00-5:00pm
Incident response is an art that requires speed and precision, oftentimes racing against adversaries and their actions. In this workshop, we will look at how to utilize LimaCharlie to automate incident response workflows from end-to-end. Attendees will learn how to utilize infrastructure as code to rapidly deploy IR-focused tenants, easily ingest various telemetry types, and deploy detections to automate the classification and prioritization of a client environment. Designed for incident responders, this hands-on session will highlight how LimaCharlie can streamline incident response efforts, giving your team the advantage it needs to quickly thwart attackers.


Full agenda:

​1:00-3:00pm - Purple Teaming Okta Detections
3:00-5:00pm - Automating Incident Response
5:00-7:00pm - Happy hour