#purpleteam

🎥 A session from BSides Luxembourg 2026 is now available to watch! 🟣🤖 𝗚𝗢𝗢𝗗𝗕𝗬𝗘 𝗣𝗨𝗥𝗣𝗟𝗘 𝗧𝗘𝗔𝗠, 𝗛𝗘𝗟𝗟𝗢 𝗣𝗨𝗥𝗣𝗟𝗘 𝗕𝗢𝗧𝗦 🛡️⚔️ Patrick Mkhael https://pretalx.com/bsidesluxembourg-2026/speaker/WHMGFD/ Ralph El Khoury https://pretalx.com/bsidesluxembourg-2026/speaker/X9QCJN/ Watch Patrick Mkhael and Ralph El Khoury's session, recorded live at the Digital Learning Hub during BSides Luxembourg 2026. https://archive.org/details/BSidesLuxembourg2026/d1+t2+08+Goodbye+Purple+Team%2C+Hello+Purple+Bots+-+Patrick+Mkhael+and+Ralph+El+Khoury.mkv "smartCard-inline" #BSidesLuxembourg2026 #CyberSecurity #PurpleTeam #RedTeam #BlueTeam #AI

#introduction: Hon3yBadg3r here. Purple team. Offense-minded defense. Allergic to hiding from the panopticon — built a better one instead. Independent research at ihbv.io: hardware, ICS/OT, RF, mesh. Tenacity is the whole methodology. Relentless, low ego, high bite. #purpleteam #infosec

I really like those formats as I feel free to roam about, and I believe everyone can learn from each other. I especially appreciate when folks show consideration for each other’s needs. Whenever I'm not busy posing for various photo shoots to represent the Open Security Conference, I'm enjoying myself capturing flags with like-minded folks. Come find me at the Open Security Conference! My Tags: #SecureAllTheThings, #PurpleTeam, #CTF, #SecurityIsFun

📢 AMSI Provider - Playbooks & Detection Strategies 🎙️ Threat actors with elevated permissions could abuse this behaviour and register a fake AMSI provider to establish persistence. 𝑫𝒆𝒕𝒆𝒄𝒕𝒊𝒐𝒏 𝑺𝒕𝒓𝒂𝒕𝒆𝒈𝒊𝒆𝒔 ✅ 7 - Sysmon Fake AMSI Provider DLL ✅ 4663 - Modification of HKLM\SOFTWARE\Microsoft\AMSI\Providers Registry Key ✅ 4688 - regsvr32 Process 🖊️ https://ipurple.team/2026/07/13/amsi-provider/#redteam #purpleteam #ipurple