Intelligence-Driven Incident Response: Outwitting the Adversary
- ISBN-10
- 1491935197
- ISBN-13
- 9781491935194
- Category
- Computers
- Pages
- 284
- Language
- English
- Published
- 2017-08-21
- Publisher
- "O'Reilly Media, Inc."
- Authors
- Scott J Roberts, Rebekah Brown
Description
Using a well-conceived incident response plan in the aftermath of an online security breach enables your team to identify attackers and learn how they operate. But, only when you approach incident response with a cyber threat intelligence mindset will you truly understand the value of that information. With this practical guide, you’ll learn the fundamentals of intelligence analysis, as well as the best ways to incorporate these techniques into your incident response process. Each method reinforces the other: threat intelligence supports and augments incident response, while incident response generates useful threat intelligence. This book helps incident managers, malware analysts, reverse engineers, digital forensics specialists, and intelligence analysts understand, implement, and benefit from this relationship. In three parts, this in-depth book includes: The fundamentals: get an introduction to cyber threat intelligence, the intelligence process, the incident-response process, and how they all work together Practical application: walk through the intelligence-driven incident response (IDIR) process using the F3EAD process—Find, Fix Finish, Exploit, Analyze, and Disseminate The way forward: explore big-picture aspects of IDIR that go beyond individual incident-response investigations, including intelligence team building
Get the book
Other editions
-
- 2017-08-21
- 284 pages
- Paperback
- "O'Reilly Media, Inc."
Similar books
-
Family History Digital Libraries
By William Sims BainbridgeOne named Sara and Timberlake had 11 male workers, 1 female worker, and 4 children workers, so it might have employed the Minor family.
-
Foundation Dreamweaver MX
By Craig Grannell, Jerome Turner, Matt StephensSo here's what we need to do to arrive at our layout: s Create the main table to hold all the page elements. s Deal with the navigation area which is ...
-
Cisco CCNA Certification, 2 Volume Set: Exam 200-301
By Todd LammleThis inclusive, two-book set provides what you need to know to succeed on the new CCNA exam. The set includes Understanding Cisco Networking Technologies: Volume 1 and the CCNA Certification Study Guide: Volume 2.
-
CompTIA Network+ Study Guide: Exam N10-006
By Todd Lammle... you can use: –a –A –c –n –r –R –S –s All nbtstat switches are case sensitive. Generally speaking, lowercase switches deal with NetBIOS names of hosts, ...
-
CompTIA Network+ Study Guide with Online Labs: N10-007 Exam
By Todd Lammle, Jon Buhagiar... you can use: –a –A –c –n –r –R –S –s All nbtstat switches are case sensitive. Generally speaking, lowercase switches deal with NetBIOS names of hosts, ...
-
CCNA: Cisco Certified Network Associate FastPass
By Todd LammleS The S reference point defines the point between the customer router and an ... with the letter E deal with using ISDN on the existing telephone network.
-
Stranger in the Chat Room
By Todd Hafer, Jedd HaferA sequel to In the Chat Room With God finds a group of teens contacted by a mysterious and increasingly malevolent character who claims to know about their encounters with the Almighty and challenges their beliefs. Original.
-
Error Correction Coding: Mathematical Methods and Algorithms
By Todd K. MoonM M−1∑ k=0 −∞ ∞ k=0 The average energy per signal E s ∫ can be related to the ... we will deal primarily with additive white Gaussian noise (AWGN), ...
-
Security+ Training Guide
By Todd King... to deal with most , but unfortunately not all , of these potential threats . ... The S / MIME standard implements encryption for message content using ...
-
CCDA: Cisco Certified Design Associate Study Guide: Exam 640-861
By Todd Lammle, Andy BarklS reference point The S reference point defines the reference point between ... with the letter E deal with using ISDN on the existing telephone network.