The types of logs available in an operating system may vary; in this book, we will focus on core logs that are relevant from a security perspective. We will use Windows and Linux operating systems to demonstrate that.
- Preface
- Security Posture
- Incident response process
- Handling an incident
- Post-incident activity
- Incident response in the cloud
- References
- Summary
- Understanding the Cybersecurity Kill Chain
- External reconnaissance
- Internal reconnaissance
- Conclusion of the reconnaissance chapter
- References
- Compromising the System
- References
- Summary
- Chasing a User's Identity
- Lateral Movement
- Privilege Escalation
- Security Policy
- Monitoring for compliance
- References
- Summary
- Network Segmentation
- Active Sensors
- Introduction to threat intelligence
- Open source tools for threat intelligence
- Microsoft threat intelligence
- Leveraging threat intelligence to investigate suspicious activity
- References
- Summary
- Investigating an Incident
- Recovery Process
- Disaster recovery plan
- Live recovery
- Contingency planning
- Best practices for recovery
- References
- Summary
- Vulnerability Management
- Implementation of vulnerability management
- Best practices for vulnerability management
- Implementing vulnerability management with Nessus
- Flexera (Secunia) Personal Software Inspector
- Conclusion
- References
- Summary
- Log Analysis
- Leave a review - let other readers know what you think
Operating system logs
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.