MITRE ATT&CK Defender™ ATT&CK® Purple Teaming Fundamentals
Do you want to learn the exciting discipline of Purple Teaming? In this MITRE ATT&CK® Defender™ (MAD) Purple Teaming Fundamentals course, you’ll learn to do collaborative purple teaming focused on prioritized malicious behaviors. Experts from MITRE show you the actionable defensive rewards that only come when red and blue teams work together.
Already have an account? Sign In »

Module 1: Purple Teaming Fundamentals
Do you want to learn the exciting discipline of Purple Teaming? In this MITRE ATT&CK® Defender™ (MAD) Purple Teaming Fundamentals course, you’ll learn how to plan, design, and implement a collaborative purple teaming engagement focused on prioritized malicious behaviors. Experts from MITRE show you the actionable defensive rewards that only come when red and blue teams work together.
Who should take this course?
This course is designed for experienced and skilled cybersecurity practitioners who are interested in running collaborative purple team events to help improve their defensive posture.
What are the prerequisites for this course?
You will gain the most benefit from this course if you have mastered the following:
- MITRE ATT&CK® Defender™ (MAD) ATT&CK Fundamentals Training
- MITRE ATT&CK® Defender™ (MAD) Adversary Emuliation Training
- MITRE ATT&CK® Defender™ (MAD) Threat Hunting Fundamentals Training
Why should I take this course?
In this course, you will gain the ability to do the following:
- Partner with stakeholders to identify top priority defensive gaps to address through purple teaming
- Convert high-level requirements into an actionable purple team plan
- Determine requirements for the purple team environment, taking into account tradeoffs between common options
- Coordinate red and blue teams to engage collaboratively to develop new, actionable defensive measures (with a focus on analytics)
- Elicit and document recommendations for future action, including analytics to deploy, and possible future purple team events
What makes this course different from other courses on similar topics?
This course is part of the MITRE ATT&CK® Defender™ (MAD) cybersecurity training and certification program produced by MITRE's own subject matter experts. The instructors for this course are truly the experts in this field. You will be learning how to leverage ATT&CK for purple teaming from the people who created the ATT&CK framework.
Why should I take this course on Cybrary and not somewhere else?
This course enables you to learn from the foremost experts in the field, and our on-demand format affords you the flexibility to learn at your own pace.

Steve Luke
Director of Training and Certification for MITRE ATT&CK Defender

Jamie Williams
Lead Cyber Adversarial Engineer at MITRE

Daniel Matthews
Senior Cybersecurity Engineer


Complete this entire course to earn a MITRE ATT&CK Defender™ ATT&CK® Purple Teaming Fundamentals Certificate of Completion