The blue team focusses with defending the organisation. Blue teams are in command of strengthening up an organisation’s protective stratagems and necessitating action when needed.

The Blue Team task is with discovering adversaries and stopping them from smashing into the organisation’s perimeter. Blue teams prepare before an attack by assessing the conditions and hardening where demanded. Throughout the attack simulation, they intend to distinguish breaches speedily, curb the extent of malware infection by circumscribing to the system it infiltrated through, and triumphantly terminate the outbreak. Some simulations may comprise Blue Team planning or accomplishing restoration propositions.