Security Onion What Is It
Download Security Onion What Is It PDF/ePub or read online books in Mobi eBooks. Click Download or Read Online button to get Security Onion What Is It book now. This website allows unlimited access to, at the time of writing, more than 1.5 million titles, including hundreds of thousands of titles in various foreign languages.
Digital Forensics and Incident Response
Author: Gerard Johansen
language: en
Publisher: Packt Publishing Ltd
Release Date: 2017-07-24
A practical guide to deploying digital forensic techniques in response to cyber security incidents About This Book Learn incident response fundamentals and create an effective incident response framework Master forensics investigation utilizing digital investigative techniques Contains real-life scenarios that effectively use threat intelligence and modeling techniques Who This Book Is For This book is targeted at Information Security professionals, forensics practitioners, and students with knowledge and experience in the use of software applications and basic command-line experience. It will also help professionals who are new to the incident response/digital forensics role within their organization. What You Will Learn Create and deploy incident response capabilities within your organization Build a solid foundation for acquiring and handling suitable evidence for later analysis Analyze collected evidence and determine the root cause of a security incident Learn to integrate digital forensic techniques and procedures into the overall incident response process Integrate threat intelligence in digital evidence analysis Prepare written documentation for use internally or with external parties such as regulators or law enforcement agencies In Detail Digital Forensics and Incident Response will guide you through the entire spectrum of tasks associated with incident response, starting with preparatory activities associated with creating an incident response plan and creating a digital forensics capability within your own organization. You will then begin a detailed examination of digital forensic techniques including acquiring evidence, examining volatile memory, hard drive assessment, and network-based evidence. You will also explore the role that threat intelligence plays in the incident response process. Finally, a detailed section on preparing reports will help you prepare a written report for use either internally or in a courtroom. By the end of the book, you will have mastered forensic techniques and incident response and you will have a solid foundation on which to increase your ability to investigate such incidents in your organization. Style and approach The book covers practical scenarios and examples in an enterprise setting to give you an understanding of how digital forensics integrates with the overall response to cyber security incidents. You will also learn the proper use of tools and techniques to investigate common cyber security incidents such as malware infestation, memory analysis, disk analysis, and network analysis.
Security Onion Documentation
Security Onion is a free and open source Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes Elasticsearch, Logstash, Kibana, Suricata, Zeek, Wazuh, CyberChef, and many other security tools. This documentation will give you an overview of installation, configuration, and usage of Security Onion and its components. Don't miss the inspiring foreword by Richard Bejtlich! Proceeds go to the Rural Technology Fund! This book covers the following Security Onion topics: Getting Started Security Onion Console (SOC) Analyst VM Network Visibility Host Visibility Logs Updating Accounts Services Customizing for Your Environment Tuning Tricks and Tips Utilities Many folks have asked for a printed version of our official online documentation and we're excited to provide that! Whether you work on airgapped networks or simply want a portable desk reference, this is what you've been asking for! Q&A What is Security Onion? Security Onion is a free and open source Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes Elasticsearch, Logstash, Kibana, Snort, Suricata, Zeek, Wazuh, CyberChef, and many other security tools. Security Onion was started by Doug Burks in 2008. Who is Doug Burks? Doug Burks started Security Onion as a free and open source project in 2008 and then founded Security Onion Solutions, LLC in 2014. What is Security Onion Solutions? Doug Burks started Security Onion Solutions, LLC in 2014. Security Onion Solutions is the only official provider of training, professional services, and hardware appliances for Security Onion. Who wrote this book? Security Onion Solutions is the primary author and maintainer of this documentation. Some content has been contributed by members of our community. Thanks to all the folks who have contributed to this documentation over the years! The inspiring foreword was written by Richard Bejtlich! What is the difference between this book and the online documentation? This book is the online documentation formatted specifically for print. It also includes an inspiring foreword by Richard Bejtlich that is not available anywhere else! Finally, proceeds go to the Rural Technology Fund! Who should get this book? Security Onion users who work on airgapped networks or simply want a portable reference that requires no Internet connection and no batteries! Also anyone who wants to donate to a worthy cause like Rural Technology Fund!
Applied Network Security Monitoring
Applied Network Security Monitoring is the essential guide to becoming an NSM analyst from the ground up. This book takes a fundamental approach to NSM, complete with dozens of real-world examples that teach you the key concepts of NSM. Network security monitoring is based on the principle that prevention eventually fails. In the current threat landscape, no matter how much you try, motivated attackers will eventually find their way into your network. At that point, it is your ability to detect and respond to that intrusion that can be the difference between a small incident and a major disaster. The book follows the three stages of the NSM cycle: collection, detection, and analysis. As you progress through each section, you will have access to insights from seasoned NSM professionals while being introduced to relevant, practical scenarios complete with sample data. If you've never performed NSM analysis, Applied Network Security Monitoring will give you an adequate grasp on the core concepts needed to become an effective analyst. If you are already a practicing analyst, this book will allow you to grow your analytic technique to make you more effective at your job. - Discusses the proper methods for data collection, and teaches you how to become a skilled NSM analyst - Provides thorough hands-on coverage of Snort, Suricata, Bro-IDS, SiLK, and Argus - Loaded with practical examples containing real PCAP files you can replay, and uses Security Onion for all its lab examples - Companion website includes up-to-date blogs from the authors about the latest developments in NSM