What is Blue Team ?

It is the team that defends against both real attackers and Red Team attacks. The Blue Team needs to protect themselves from attacks by the Red Team. Blue Teams should not be considered within standard security teams because most security operations teams do not have the mindset of being constantly vigilant against attack, which is the mission and perspective of a true Blue team. Blue team members must have the ability to analyze broad types of data and intelligence.

What is the Benefit of  Blue Team ?

• They take care of network perimeter defense and traffic flow.
• Strengthen application security.
• Use appropriate tools to secure the organization’s environment.
• Help maintain proper log management and analysis.
• They can use Security Incident and Event Management (SIEM) technology etc.