Mein Konto
Login Anmeldung
Alles
Warenkorb
Neuesten Trends
Belletristik
Sachbücher
Kinderbücher
Seltene Bücher
Musik
DVD & Blu-Ray
Kategorie
Wunschlisten
Warenkorb
Alles
Kostenloser Versand
Trustpilot
Unsere Operationen sind klimaneutral

Effective Threat Investigation for SOC Analysts Mostafa Yahia

Effective Threat Investigation for SOC Analysts von Mostafa Yahia

Effective Threat Investigation for SOC Analysts Mostafa Yahia

61.00
Zustand - Wie Neu
Nicht auf Lager
Wie Neu

Effective Threat Investigation for SOC Analysts Zusammenfassung

Effective Threat Investigation for SOC Analysts: The ultimate guide to examining various threats and attacker techniques using security logs Mostafa Yahia

Detect and investigate various cyber threats and techniques carried out by malicious actors by analyzing logs generated from different sources Purchase of the print or Kindle book includes a free PDF eBook Key Features Understand and analyze various modern cyber threats and attackers' techniques Gain in-depth knowledge of email security, Windows, firewall, proxy, WAF, and security solution logs Explore popular cyber threat intelligence platforms to investigate suspicious artifacts Book DescriptionEffective threat investigation requires strong technical expertise, analytical skills, and a deep understanding of cyber threats and attacker techniques. It's a crucial skill for SOC analysts, enabling them to analyze different threats and identify security incident origins. This book provides insights into the most common cyber threats and various attacker techniques to help you hone your incident investigation skills. The book begins by explaining phishing and email attack types and how to detect and investigate them, along with Microsoft log types such as Security, System, PowerShell, and their events. Next, you'll learn how to detect and investigate attackers' techniques and malicious activities within Windows environments. As you make progress, you'll find out how to analyze the firewalls, flows, and proxy logs, as well as detect and investigate cyber threats using various security solution alerts, including EDR, IPS, and IDS. You'll also explore popular threat intelligence platforms such as VirusTotal, AbuseIPDB, and X-Force for investigating cyber threats and successfully build your own sandbox environment for effective malware analysis. By the end of this book, you'll have learned how to analyze popular systems and security appliance logs that exist in any environment and explore various attackers' techniques to detect and investigate them with ease.What you will learn Get familiarized with and investigate various threat types and attacker techniques Analyze email security solution logs and understand email flow and headers Find out how to analyze Microsoft event logs Practical investigation of the various Windows threats and attacks Analyze web proxy logs to investigate C&C communication attributes Understand web application firewall (WAF) logs and examine various external attacks Analyze FW logs and security alerts to investigate cyber threats Understand the role of CTI in investigation and identify potential threats Who this book is forThis book is for Security Operation Center (SOC) analysts, security professionals, cybersecurity incident investigators, incident handlers, incident responders, or anyone looking to explore attacker techniques and delve deeper into detecting and investigating attacks. If you want to efficiently detect and investigate cyberattacks by analyzing logs generated from different log sources, then this is the book for you. Basic knowledge of cybersecurity and networking domains and entry-level security concepts are necessary to get the most out of this book.

Über Mostafa Yahia

Mostafa Yahia is a passionate threat investigator and hunter who hunted and investigated several cyber incidents. His experience includes building and leading cyber security managed services such as SOC and threat hunting services. He earned a bachelor's degree in computer science in 2016. Additionally, Mostafa has the following certifications: GCFA, GCIH, CCNA, IBM QRadar, and FireEye System engineer. Mostafa also provides free courses and lessons through his YouTube channel. Currently, he is the cyber defense services senior leader for SOC, Threat hunting, DFIR, and Compromise assessment services in an MSSP company.

Inhaltsverzeichnis

Table of Contents
  1. Investigating Email Threats
  2. Email Flow and Header Analysis
  3. Introduction to Windows Event Logs
  4. Tracking Accounts Login and Management
  5. Investigating Suspicious Process Execution Using Windows Event Logs
  6. Investigating PowerShell Event Logs
  7. Investigating Persistence and Lateral Movement Using Windows Event Logs
  8. Network Firewall Logs Analysis
  9. Investigating Cyber Threats by Using the Firewall Logs
  10. Web Proxy Logs Analysis
  11. Investigating Suspicious Outbound Communications (C&C Communications) by Using Proxy Logs
  12. Investigating External Threats
  13. Investigating Network Flows and Security Solutions Alerts
  14. Threat Intelligence in a SOC Analyst's Day
  15. Malware Sandboxing - Building a Malware Sandbox

Zusätzliche Informationen

GOR013953147
9781837634781
1837634785
Effective Threat Investigation for SOC Analysts: The ultimate guide to examining various threats and attacker techniques using security logs Mostafa Yahia
Mostafa Yahia
Gebraucht - Wie Neu
Broschiert
Packt Publishing Limited
2023-08-25
314
N/A
Die Abbildung des Buches dient nur Illustrationszwecken, die tatsächliche Bindung, das Cover und die Auflage können sich davon unterscheiden.
Das Buch wurde gelesen, ist aber in gutem Zustand. Alle Seiten sind intakt, der Einband ist unversehrt. Leichte Gebrauchsspuren am Buchrücken. Das Buch wurde gelesen, sieht jedoch noch wie neu aus. Der Bucheinband weist keine sichtbaren Gebrauchsspuren auf. Gegebenenfalls ist auch ein Schutzumschlag verfügbar. Keine fehlenden oder beschädigten Seiten, keine Risse, eventuell minimale Knicke, keine unterstrichenen oder markierten Textstellen, keine beschrifteten Ränder.