Detect and investigate various cyber threats and techniques carried out by malicious actors by analyzing logs generated from different sourcesPurchase of the print or Kindle book includes a free PDF eBookKey FeaturesUnderstand and analyze various modern cyber threats and attackers' techniquesGain in-depth knowledge of email security, Windows, firewall, proxy, WAF, and security solution logsExplore popular cyber threat intelligence platforms to investigate suspicious artifactsBook DescriptionEffective threat investigation requires strong technical expertise, analytical skills, and a deep understanding of cyber threats and attacker techniques. It's a crucial skill for SOC analysts, enabling them to analyze different threats and identify security incident origins. This book provides insights into the most common cyber threats and various attacker techniques to help you hone your incident investigation skills.The book begins by explaining phishing and email attack types and how to detect and investigate them, along with Microsoft log types such as Security, System, PowerShell, and their events. Next, you'll learn how to detect and investigate attackers' techniques and malicious activities within Windows environments. As you make progress, you'll find out how to analyze the firewalls, flows, and proxy logs, as well as detect and investigate cyber threats using various security solution alerts, including EDR, IPS, and IDS. You'll also explore popular threat intelligence platforms such as VirusTotal, AbuseIPDB, and X-Force for investigating cyber threats and successfully build your own sandbox environment for effective malware analysis.By the end of this book, you'll have learned how to analyze popular systems and security appliance logs that exist in any environment and explore various attackers' techniques to detect and investigate them with ease.What you will learnGet familiarized with and investigate various threat types and attacker techniquesAnalyze email security solution logs and understand email flow and headersFind out how to analyze Microsoft event logsPractical investigation of the various Windows threats and attacksAnalyze web proxy logs to investigate C&C communication attributesUnderstand web application firewall (WAF) logs and examine various external attacksAnalyze FW logs and security alerts to investigate cyber threatsUnderstand the role of CTI in investigation and identify potential threatsWho this book is forThis book is for Security Operation Center (SOC) analysts, security professionals, cybersecurity incident investigators, incident handlers, incident responders, or anyone looking to explore attacker techniques and delve deeper into detecting and investigating attacks. If you want to efficiently detect and investigate cyberattacks by analyzing logs generated from different log sources, then this is the book for you. Basic knowledge of cybersecurity and networking domains and entry-level security concepts are necessary to get the most out of this book.Table of ContentsInvestigating Email ThreatsEmail Flow and Header AnalysisIntroduction to Windows Event LogsTracking Accounts Login and ManagementInvestigating Suspicious Process Execution Using Windows Event LogsInvestigating PowerShell Event LogsInvestigating Persistence and Lateral Movement Using Windows Event LogsNetwork Firewall Logs AnalysisInvestigating Cyber Threats by Using the Firewall LogsWeb Proxy Logs Analysis(N.B. Please use the Look Inside option to see further chapters)
Details e-book Effective Threat Investigation for SOC Analysts: The ultimate guide to examining various threats and attacker techniques using security logs
🗸 Author(s): Mostafa Yahia
🗸 Title: Effective Threat Investigation for SOC Analysts: The ultimate guide to examining various threats and attacker techniques using security logs
🗸 Rating : 4.5 from 5 stars (12 reviews)
🗸 ISBN-10: 1837634785
🗸 ISBN-13: 9781837634781
🗸 Languange: English
🗸 Format ebook: PDF, EPUB, Kindle, Audio, HTML and MOBI
🗸 Supported Devices: Android, iOS, PC and Amazon Kindle
✓ Read as many eBooks you want!
✓ Secure Scanned. No Virus Detected
✓ Thousands of eBooks to choose from - Hottest new releases
✓ Click it and Read it! - no waiting to read eBooks, it's instant!
✓ Keep reading your favorite eBooks over and over!
✓ It works anywhere in the world!
✓ No late fees or fixed contracts - cancel anytime!
Readers' opinions about Effective Threat Investigation for SOC Analysts: The ultimate guide to examining various threats and attacker techniques using security logs by Mostafa Yahia
Lindsea Lawrence
Explore the wonders of the natural world with this captivating exploration of wildlife and ecosystems. From the depths of the ocean to the heights of the mountains, the author takes readers on a journey through some of the planet's most extraordinary habitats. With its stunning photography and fascinating insights, this book is a feast for the eyes and the mind.
Arley Burrows
Discover the secrets of successful entrepreneurship with this insightful guide to starting and growing a business. Packed with practical advice and real-world examples, the author shares invaluable wisdom gleaned from years of experience in the business world. Whether you're a seasoned entrepreneur or just starting out, this book is a valuable resource for anyone looking to build a successful venture.
Danet Tucker
Dive into a gripping thriller that takes readers on a pulse-pounding journey through the criminal underworld. Set in a gritty urban landscape, the story follows a determined detective as he races against time to catch a ruthless serial killer. With its twisty plot and nail-biting suspense, this book is guaranteed to keep readers on the edge of their seats.
