Windows Forensics Analyst Field Guide. Engage in proactive cyber defense using digital forensics techniques by Muhiballah Mohammed, 2023

The book begins by unveiling the intricacies of Windows operating systems and their foundational forensic artifacts, helping you master the art of streamlined investigative processes. From harnessing opensource tools for artifact collection to delving into advanced analysis, you’ll develop the skills needed to excel as a seasoned forensic examiner. As you advance, you’ll be able to effortlessly amass and dissect evidence to pinpoint the crux of issues. You’ll also delve into memory forensics tailored for Windows OS, decipher patterns within user data, and log and untangle intricate artifacts such as emails and browser data.

By the end of this book, you’ll be able to robustly counter computer intrusions and breaches, untangle digital complexities with unwavering assurance, and stride confidently in the realm of digital forensics.

Source

#book #forensic

Администрирование системы защиты SELinux, Свен Вермейлен, 2020

Рассмотрение традиционных решений по обеспечению безопасности и эффективной защиты операционных систем семейства Linux с помощью средств SELinux

Эта книга показывает, как значительно усилить безопасность операционной системы Linux и устранить имеющиеся уязвимости установленных приложений. Вы узнаете, как работает SELinux, как можно настроить ее под свои нужды и усилить с ее помощью защиту систем виртуализации, включающих технологию libvirt (sVirt) и контейнеризацию Docker.

Также рассказывается об управляющих действиях, позволяющих улучшить безопасность конкретной системы с помощью принудительного контроля доступа – стратегии защиты, определяющей безопасность Linux уже много лет. Большинство возможностей системы защиты рассматривается на реальных примерах.

#book #linux

Wireshark for Security Professionals. Using Wireshark and the Metasploit Framework, Jessey Bullock and Jeff T. Parker, 2017

Wireshark for Security Professionals covers both offensive and defensive concepts that can be applied to essentially any InfoSec role. Whether into network security, malware analysis, intrusion detection, or penetration testing, this book demonstrates Wireshark through relevant and useful examples.

#book #cisco

Network Security Checklist

Network security is crucial for protecting your organization's data and resources from unauthorized access and cyberattacks.

#cisco

Cybercrime and Digital Forensics. An Introduction, Third Edition by Thomas J. Holt, Adam M. Bossler, and Kathryn C. Seigfried-Spellar, 2022

This book offers a comprehensive and integrative introduction to cybercrime. It provides an authoritative synthesis of the disparate literature on the various types of cybercrime, the global investigation and detection of cybercrime and the role of digital information, and the wider role of technology as a facilitator for social relationships between deviants and criminals.

#book #forensic

Splunk Queries for SOC Analyst, 2023

In this document, you will find a collection of useful queries to help you identify and respond to;
🔹potential security threats,
🔹failed login attempts,
🔹privilege escalation attempts,
🔹and more.

To protect themselves, Security Operations Centers (SOCs) play a crucial role in keeping a vigilant watch and defending against malicious activities. Within the SOC, quick detection and response to potential security issues are vital, and this is where Splunk, a powerful log management and analysis tool, comes into play.

These queries are designed to become a valuable ally for SOC analysts in effectively monitoring and securing their systems.

#docs