🔁 Attack & Detect
Run ATT&CK techniques with the blue team in the room, then close the gaps together. Find the misses — without turning the session into a gotcha.
Whose job is this?
This incident lands on these classes' desks. Their guides carry the certifications, tools and labs that make the calls you just made feel routine.
- Purple Teamer / Security ConsultantinitiateWarlock → Purple Teamer / Security Consultant
- Security Engineer / Detection Engineer / Tool DeveloperinitiateArtificer → Security Engineer / Tool Developer
Not sure which one is you? Roll a character.