This course will deep dive into what we call threat optics: auditing endpoints, centralizing logs, and visualizing results. Each student will leave the class having experienced a penetration test through three distinct perspectives each building on the previous. This will be done by performing a series common adversarial attacks (the Red Team) followed by an examination of defensive postures and detection methodology using open-source or free industry threat detection and defenses (the Blue Team). Finally, each of these attack / defend / hunt cycles will wrap up with reporting and communication methodology that drive inter-department collaboration and produce immediate actions for all stakeholders (the Purple Team)!