Skill UI

This skill guides the execution of structured purple team exercises, simulating real-world adversary techniques (Red Team) and validating the effectiveness of existing detection rules and controls (Blue Team). It is essential for Security Operations Center (SOC) teams to identify critical detection gaps, optimize analyst response playbooks, and enhance the overall security posture against specific threat actors mapped to MITRE ATT&CK techniques.

A comprehensive methodology for planning, running, and measuring strategic adversary engagement operations using the MITRE Engage framework. It guides teams beyond ad hoc deception by defining measurable Goals (Expose, Affect, Elicit), Operational Objectives, and mapping activities to specific MITRE ATT&CK techniques. Essential for building formal denial and deception programs.