This book provides practical insights into developing an incident response capability through intelligence-based threat hunting. It covers theoretical concepts and real-life scenarios to help apply incident response concepts within an organization. The book explores the fundamentals of incident response, incident management, threat hunting, and threat intelligence using various platforms and tools. It covers topics such as developing incident response capabilities, creating incident response plans and playbooks, integrating cyber threat intelligence and threat hunting into incident response, and working with analytics and detection engineering in incident response. The book is suitable for information security professionals or anyone who wants to learn the principles of incident management, first response, threat hunting, and threat intelligence.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Security cheatsheets to aid penetration testers and security enthusiasts in remembering useful but not frequently used commands.
An annual jeopardy-style capture-the-flag contest with challenges related to cybersecurity.
The SOC Academy offers official VirusTotal certification courses to help cybersecurity professionals maximize its functionalities and advance their careers.
Collection of cybersecurity conference videos from GreHack 2018 covering various cutting-edge topics.
A comprehensive and immersive 13-week course by NYU Tandon's OSIRIS Lab introducing students to offensive security with practical applications and research projects.
A comprehensive guide to using Metasploit, including searching for modules, specifying exploits and payloads, and using auxiliary modules.
Comprehensive documentation for ThreatConnect's REST API and SDKs.
Deliberately vulnerable CI/CD environment with 11 challenges to practice security.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.