“For the longest time, we didn’t have a purple team. It wasn’t until we got more into AttackIQ that I went to my manager and suggested the purple team approach. Since adopting the purple team approach, we have had a good cadence with the blue team, where we meet and share reports from the AttackIQ…
“Our initial intention is to ensure whatever endpoint security solution we have, that our technology stack is firing appropriately. That it’s catching when it’s supposed to catch, preventing what’s supposed to prevent. AttackIQ has allowed us to test and get a good picture of our EDR capabilities. I know AttackIQ is working as intended because…
“The ability to test scenarios that recently hit the news is a huge relief and extremely beneficial to know that your company is protected. We used AttackIQ’s scenarios for Log4j and the Ukrainian conflict. I’m always grateful that AttackIQ is in the war rooms at short notice. We can trust AttackIQ to share content from…
“MITRE ATT&CK has been an enormous resource for us. We use it a lot with AttackIQ because we aren’t just concentrating on our EDR baselines. But there are known TTPs that specifically target similar industries to us. We use the MTIRE ATT&CK framework to determine what to go after and what to test next.”
“AttackIQ wasn’t just a tool, but a long-term partnership with the people at the company. Everyone I interacted with was great with customer service and knew the platform well, which was important to me. My interactions with the employees made it clear that AttackIQ was a good company I could trust. Anybody that wants to…
“Now, we can automatically test something and get feedback within the AttackIQ. Nobody needs to check for alerts manually. We brought automated testing to different teams, like for our blue and networking teams, for networking segmentation.”