Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Cybersecurity Blue Team Strategies
  • Table Of Contents Toc
  • Feedback & Rating feedback
Cybersecurity Blue Team Strategies

Cybersecurity Blue Team Strategies

By : Kunal Sehgal, Nikolaos Thymianis
4.5 (2)
close
close
Cybersecurity Blue Team Strategies

Cybersecurity Blue Team Strategies

4.5 (2)
By: Kunal Sehgal, Nikolaos Thymianis

Overview of this book

We've reached a point where all organizational data is connected through some network. With advancements and connectivity comes ever-evolving cyber threats - compromising sensitive data and access to vulnerable systems. Cybersecurity Blue Team Strategies is a comprehensive guide that will help you extend your cybersecurity knowledge and teach you to implement blue teams in your organization from scratch. Through the course of this book, you’ll learn defensive cybersecurity measures while thinking from an attacker's perspective. With this book, you'll be able to test and assess the effectiveness of your organization’s cybersecurity posture. No matter the medium your organization has chosen- cloud, on-premises, or hybrid, this book will provide an in-depth understanding of how cyber attackers can penetrate your systems and gain access to sensitive information. Beginning with a brief overview of the importance of a blue team, you’ll learn important techniques and best practices a cybersecurity operator or a blue team practitioner should be aware of. By understanding tools, processes, and operations, you’ll be equipped with evolving solutions and strategies to overcome cybersecurity challenges and successfully manage cyber threats to avoid adversaries. By the end of this book, you'll have enough exposure to blue team operations and be able to successfully set up a blue team in your organization.
Table of Contents (18 chapters)
close
close
1
Part 1:Establishing the Blue
14
Part 3:Ask the Experts

Threat hunting

As the name implies, threat hunting is a practice designed to assist you in finding adversaries within your network. The intention here is to try and look for any compromise proactively rather than waiting for an alert to be raised by the SOC. This helps avoid fire-fighting situations and to try and stop the attackers as early as possible.

It is important to note that a threat hunt is an activity that is quite different from a Digital Forensics and Incident Response (DFIR) activity. An imperative aspect of DF/IR methodologies is their ability to evaluate what happened in the event of a data breach after it has already been discovered. When, on the other hand, a threat hunting team engages in the task of threat hunting, they are looking for those attacks that may have already penetrated your defenses but may or may not have led to an impact on your organization. The threat hunting strategy differs from most other forms of security management in that it is a proactive...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech

Create a Note

Modal Close icon
You need to login to use this feature.
notes
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Delete Note

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Edit Note

Modal Close icon
Write a note (max 255 characters)
Cancel
Update Note

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY