Effective Threat Investigation for SOC Analysts

Name: Effective Threat Investigation for SOC Analysts
Brand: Packt Publishing
SKU: 01327738

Cargando comentarios…

$903

$813

Envío gratis siempre

Comentarios

Cargando el resumen…

Por favor, inicia sesión para escribir un comentario.

Cargando comentarios…

1338360Effective Threat Investigation for SOC Analystshttps://www.gandhi.com.mx/effective-threat-investigation-for-soc-analysts/phttps://gandhi.vtexassets.com/arquivos/ids/553135/52234ab8-3a4f-4434-b299-56d2c761b94f.jpg?v=638568490852100000813903MXNPackt PublishingInStock/Ebooks/1327738Effective Threat Investigation for SOC Analysts813903https://www.gandhi.com.mx/effective-threat-investigation-for-soc-analysts/phttps://gandhi.vtexassets.com/arquivos/ids/553135/52234ab8-3a4f-4434-b299-56d2c761b94f.jpg?v=638568490852100000InStockMXN99999DIEbook20239781837638758_W3siaWQiOiIxNDJmMzNlOC1kM2MxLTQxNDEtYjU4Ny1lZTc3Yzg1NWEwYWMiLCJsaXN0UHJpY2UiOjkwMywiZGlzY291bnQiOjkwLCJzZWxsaW5nUHJpY2UiOjgxMywiaW5jbHVkZXNUYXgiOnRydWUsInByaWNlVHlwZSI6Ildob2xlc2FsZSIsImN1cnJlbmN5IjoiTVhOIiwiZnJvbSI6IjIwMjQtMDctMTdUMTg6MDA6MDBaIiwicmVnaW9uIjoiTVgiLCJpc1ByZW9yZGVyIjpmYWxzZX1d9781837638758_<p><b>Detect and investigate various cyber threats and techniques carried out by malicious actors by analyzing logs generated from different sources Purchase of the print or Kindle book includes a free PDF eBook</b></p><h4>Key Features</h4><ul><li>Understand and analyze various modern cyber threats and attackers techniques</li><li>Gain in-depth knowledge of email security, Windows, firewall, proxy, WAF, and security solution logs</li><li>Explore popular cyber threat intelligence platforms to investigate suspicious artifacts</li></ul><h4>Book Description</h4>Effective threat investigation requires strong technical expertise, analytical skills, and a deep understanding of cyber threats and attacker techniques. Its a crucial skill for SOC analysts, enabling them to analyze different threats and identify security incident origins. This book provides insights into the most common cyber threats and various attacker techniques to help you hone your incident investigation skills. The book begins by explaining phishing and email attack types and how to detect and investigate them, along with Microsoft log types such as Security, System, PowerShell, and their events. Next, youll learn how to detect and investigate attackers techniques and malicious activities within Windows environments. As you make progress, youll find out how to analyze the firewalls, flows, and proxy logs, as well as detect and investigate cyber threats using various security solution alerts, including EDR, IPS, and IDS. Youll also explore popular threat intelligence platforms such as VirusTotal, AbuseIPDB, and X-Force for investigating cyber threats and successfully build your own sandbox environment for effective malware analysis. By the end of this book, youll have learned how to analyze popular systems and security appliance logs that exist in any environment and explore various attackers techniques to detect and investigate them with ease.<h4>What you will learn</h4><ul><li>Get familiarized with and investigate various threat types and attacker techniques</li><li>Analyze email security solution logs and understand email flow and headers</li><li>Find out how to analyze Microsoft event logs</li><li>Practical investigation of the various Windows threats and attacks</li><li>Analyze web proxy logs to investigate C&C communication attributes</li><li>Understand web application firewall (WAF) logs and examine various external attacks</li><li>Analyze FW logs and security alerts to investigate cyber threats</li><li>Understand the role of CTI in investigation and identify potential threats</li></ul><h4>Who this book is for</h4><p>This book is for Security Operation Center (SOC) analysts, security professionals, cybersecurity incident investigators, incident handlers, incident responders, or anyone looking to explore attacker techniques and delve deeper into detecting and investigating attacks. If you want to efficiently detect and investigate cyberattacks by analyzing logs generated from different log sources, then this is the book for you. Basic knowledge of cybersecurity and networking domains and entry-level security concepts are necessary to get the most out of this book.</p>...(*_*)9781837638758_<p><b>Detect and investigate various cyber threats and techniques carried out by malicious actors by analyzing logs generated from different sources Purchase of the print or Kindle book includes a free PDF eBook</b></p><h2>Key Features</h2><ul><li>Understand and analyze various modern cyber threats and attackers techniques</li><li>Gain in-depth knowledge of email security, Windows, firewall, proxy, WAF, and security solution logs</li><li>Explore popular cyber threat intelligence platforms to investigate suspicious artifacts</li></ul><h2>Book Description</h2>Effective threat investigation requires strong technical expertise, analytical skills, and a deep understanding of cyber threats and attacker techniques. Its a crucial skill for SOC analysts, enabling them to analyze different threats and identify security incident origins. This book provides insights into the most common cyber threats and various attacker techniques to help you hone your incident investigation skills. The book begins by explaining phishing and email attack types and how to detect and investigate them, along with Microsoft log types such as Security, System, PowerShell, and their events. Next, youll learn how to detect and investigate attackers techniques and malicious activities within Windows environments. As you make progress, youll find out how to analyze the firewalls, flows, and proxy logs, as well as detect and investigate cyber threats using various security solution alerts, including EDR, IPS, and IDS. Youll also explore popular threat intelligence platforms such as VirusTotal, AbuseIPDB, and X-Force for investigating cyber threats and successfully build your own sandbox environment for effective malware analysis. By the end of this book, youll have learned how to analyze popular systems and security appliance logs that exist in any environment and explore various attackers techniques to detect and investigate them with ease.<h2>What you will learn</h2><ul><li>Get familiarized with and investigate various threat types and attacker techniques</li><li>Analyze email security solution logs and understand email flow and headers</li><li>Practically investigate various Windows threats and attacks</li><li>Analyze web proxy logs to investigate C&C communication attributes</li><li>Leverage WAF and FW logs and CTI to investigate various cyber attacks</li></ul><h2>Who this book is for</h2><p>This book is for Security Operation Center (SOC) analysts, security professionals, cybersecurity incident investigators, incident handlers, incident responders, or anyone looking to explore attacker techniques and delve deeper into detecting and investigating attacks. If you want to efficiently detect and investigate cyberattacks by analyzing logs generated from different log sources, then this is the book for you. Basic knowledge of cybersecurity and networking domains and entry-level security concepts are necessary to get the most out of this book.</p>...9781837638758_Packt Publishinglibro_electonico_daab4386-db77-3059-aa32-e768828fd521_9781837638758;9781837638758_9781837638758Mostafa YahiaInglésMéxicohttps://getbook.kobo.com/koboid-prod-public/packt-epub-c696708a-3865-4b5d-9325-5d7a3d91b1fb.epub2023-08-25T00:00:00+00:00Packt Publishing