Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Incident Response in the Age of Cloud
  • Table Of Contents Toc
  • Feedback & Rating feedback
Incident Response in the Age of Cloud

Incident Response in the Age of Cloud

By : Dr. Erdal Ozkaya
4.6 (16)
close
close
Incident Response in the Age of Cloud

Incident Response in the Age of Cloud

4.6 (16)
By: Dr. Erdal Ozkaya

Overview of this book

Cybercriminals are always in search of new methods to infiltrate systems. Quickly responding to an incident will help organizations minimize losses, decrease vulnerabilities, and rebuild services and processes. In the wake of the COVID-19 pandemic, with most organizations gravitating towards remote working and cloud computing, this book uses frameworks such as MITRE ATT&CK® and the SANS IR model to assess security risks. The book begins by introducing you to the cybersecurity landscape and explaining why IR matters. You will understand the evolution of IR, current challenges, key metrics, and the composition of an IR team, along with an array of methods and tools used in an effective IR process. You will then learn how to apply these strategies, with discussions on incident alerting, handling, investigation, recovery, and reporting. Further, you will cover governing IR on multiple platforms and sharing cyber threat intelligence and the procedures involved in IR in the cloud. Finally, the book concludes with an “Ask the Experts” chapter wherein industry experts have provided their perspective on diverse topics in the IR sphere. By the end of this book, you should become proficient at building and applying IR strategies pre-emptively and confidently.
Table of Contents (18 chapters)
close
close
16
Other Books You May Enjoy
17
Index

Introducing threat intelligence

The Cost of Malware Containment report from the Ponemon Institute (available at www.ponemon.org/news-updates/blog/security/the-cost-of-malware-containment.html) states that the average organization has to look through 17,000 malware alerts each week. Therefore, having a threat intel feed that can notify you of what is happening around you can be very useful!

Put simply, the faster you escalate alerts, the better chance you have of minimizing the attack: having delays to triage can lead to a domino effect, whereby failing in the triage means also failing in the entire operation, which means the IR team has to step in and "recover" assets. By using threat intelligence as your defense system, you will have the ability to scope data based on the adversary. For example, if you are responsible for the defense of a financial institution, focusing on threat intelligence on adversaries that are actively attacking the financial industry will be...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY