Items related to Cyber Security All-in-One, Volume 3: Security Operations...
Cyber Security All-in-One, Volume 3: Security Operations and Response: SOC, SIEM, SOAR, Detection Engineering, Threat Hunting, Threat Intelligence, ... Forensics, Ransomware and Crisis Response - Softcover
Book 2 of 3: Cyber Security All-in-One
Synopsis
This is the volume for three o'clock in the morning.
Twenty chapters on how organisations actually monitor, detect, hunt, investigate, contain and recover — and how they prove afterwards that they did the right thing.
It covers building and running a security operations centre, logging and telemetry engineering, SIEM architecture and cost control, SOAR and automation, endpoint and network detection, and SOC metrics that mean something. Then detection engineering and detection-as-code, behavioural analytics and insider risk, threat intelligence, ATT&CK coverage mapping and threat hunting. Then exposure: vulnerability and attack-surface management, penetration testing, red and purple teaming. And finally the full arc of response — readiness, triage, containment, digital forensics, ransomware and extortion, and crisis communication.
Every chapter is built on a real incident
How the SolarWinds campaign was actually discovered — an anomalous second device registration, noticed by an analyst. A shipping giant's ten-day global rebuild, saved by one domain controller in Ghana that happened to be offline. A casino group's hundred-million-dollar disclosure. A bank's clearing operation halted. A national library rebuilding from nothing, and publishing its own lessons. A file-transfer flaw that reached thousands of organisations through one supplier. A manufacturer that answered a ransomware attack with daily press briefings — and rebuilt its reputation while rebuilding its network.
Every chapter gives you something to use
- A control room or bridge call under pressure, then the engineering behind it
- A controls-and-evidence table naming the auditable artefact for each control
- The board translation — what leadership must decide, and when
- A practitioner checklist and review questions whose answers teach
Plus reference apparatus you will actually reopen
Nine original framework diagrams. A field toolkit of working templates. Worked technical examples — a full detection rule specification with its false-positive profile, correlation logic for ransomware precursors, one alert triaged from raw telemetry to verdict, five incidents severity-classified, a forensic timeline with confidence ratings. A glossary of over 125 terms. A page-accurate index.
Written for SOC analysts at every tier, detection engineers, threat hunters, incident responders, forensic practitioners, and the managers accountable for response.
Assume the breach. Prove the control. Command the response.
"synopsis" may belong to another edition of this title.
Search results for Cyber Security All-in-One, Volume 3: Security Operations...
Stock Image
Cyber Security All-in-One, Volume 3: Security Operations and Response: SOC, SIEM, SOAR, Detection Engineering, Threat Hunting, Threat Intelligence, ... Forensics, Ransomware and Crisis Response
Print on DemandSeller: California Books, Miami, FL, U.S.A.
Seller rating 4 out of 5 stars
Condition: New. Print on Demand. Seller Inventory # I-9798188197636
Stock Image
Cyber Security All-in-One, Volume 3 : Security Operations and Response: SOC, SIEM, SOAR, Detection Engineering, Threat Hunting, Threat Intelligence, Vulnerability Management, Digital Forensics, Ransomware and Crisis Response
Seller: AHA-BUCH GmbH, Einbeck, Germany
Seller rating 5 out of 5 stars
Taschenbuch. Condition: Neu. Neuware. Seller Inventory # 9798188197636