Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Cybersecurity Blue Team Strategies
  • Table Of Contents Toc
  • Feedback & Rating feedback
Cybersecurity Blue Team Strategies

Cybersecurity Blue Team Strategies

By : Kunal Sehgal, Nikolaos Thymianis
4.5 (2)
close
close
Cybersecurity Blue Team Strategies

Cybersecurity Blue Team Strategies

4.5 (2)
By: Kunal Sehgal, Nikolaos Thymianis

Overview of this book

We've reached a point where all organizational data is connected through some network. With advancements and connectivity comes ever-evolving cyber threats - compromising sensitive data and access to vulnerable systems. Cybersecurity Blue Team Strategies is a comprehensive guide that will help you extend your cybersecurity knowledge and teach you to implement blue teams in your organization from scratch. Through the course of this book, you’ll learn defensive cybersecurity measures while thinking from an attacker's perspective. With this book, you'll be able to test and assess the effectiveness of your organization’s cybersecurity posture. No matter the medium your organization has chosen- cloud, on-premises, or hybrid, this book will provide an in-depth understanding of how cyber attackers can penetrate your systems and gain access to sensitive information. Beginning with a brief overview of the importance of a blue team, you’ll learn important techniques and best practices a cybersecurity operator or a blue team practitioner should be aware of. By understanding tools, processes, and operations, you’ll be equipped with evolving solutions and strategies to overcome cybersecurity challenges and successfully manage cyber threats to avoid adversaries. By the end of this book, you'll have enough exposure to blue team operations and be able to successfully set up a blue team in your organization.
Table of Contents (18 chapters)
close
close
1
Part 1:Establishing the Blue
14
Part 3:Ask the Experts

SOC

A SOC is a team of information security professionals that collaborate to monitor, identify, evaluate, and investigate any potential cybersecurity hazards posed to an organization. When looking for signs of a cyber breach, continuous scans of computer networks, websites, computers, end-user devices, and all IT assets are regularly conducted. This helps identify any potential vulnerabilities and, most importantly, any attempts being made to breach the security controls. The SOC is in charge of looking at massive amounts of logs, coming in from every security product and every control deployed by the blue team. It needs to develop rules and identify any exceptions or threats. Next, incident response processes need to be maintained and regularly tested to ensure any breach can be timely managed and contained.

In some organizations, the blue team could consist of a SOC role as well. For some other organizations, it would be imperative for the blue team to work closely with the SOC...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech

Create a Note

Modal Close icon
You need to login to use this feature.
notes
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Delete Note

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Edit Note

Modal Close icon
Write a note (max 255 characters)
Cancel
Update Note

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY