Domain 2 Red, Blue and Purple Teams

These flashcards cover the key terms and concepts related to vulnerability management and the roles of red, blue, and purple teams in cybersecurity.

Red Team

A group that simulates attackers, focusing on offensive security, ethical hacking, and penetration testing.

Blue Team

The defenders in an organization focused on stopping threats, monitoring systems, handling incidents, and maintaining security.

Purple Team

A collaborative effort between the red team and blue team to share information and improve security defenses.

Offensive Security

Activities carried out by the red team, including ethical hacking and penetration testing to identify vulnerabilities.

Simulated Spear Phishing Attack

Targeted phishing attacks performed by the red team to test an organization's security awareness.

Threat Intelligence

Knowledge gained by the red team about potential threats that can inform the blue team's defensive strategies.

Incident Handling

The process by which the blue team reacts to and manages security breaches or attacks.

Military Origins of Team Colors

The terms red team and blue team originate from military war games, with red representing the adversary and blue representing friendly forces.