Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Cybersecurity Blue Team Strategies
  • Table Of Contents Toc
  • Feedback & Rating feedback
Cybersecurity Blue Team Strategies

Cybersecurity Blue Team Strategies

By : Kunal Sehgal, Nikolaos Thymianis
4.5 (2)
close
close
Cybersecurity Blue Team Strategies

Cybersecurity Blue Team Strategies

4.5 (2)
By: Kunal Sehgal, Nikolaos Thymianis

Overview of this book

We've reached a point where all organizational data is connected through some network. With advancements and connectivity comes ever-evolving cyber threats - compromising sensitive data and access to vulnerable systems. Cybersecurity Blue Team Strategies is a comprehensive guide that will help you extend your cybersecurity knowledge and teach you to implement blue teams in your organization from scratch. Through the course of this book, you’ll learn defensive cybersecurity measures while thinking from an attacker's perspective. With this book, you'll be able to test and assess the effectiveness of your organization’s cybersecurity posture. No matter the medium your organization has chosen- cloud, on-premises, or hybrid, this book will provide an in-depth understanding of how cyber attackers can penetrate your systems and gain access to sensitive information. Beginning with a brief overview of the importance of a blue team, you’ll learn important techniques and best practices a cybersecurity operator or a blue team practitioner should be aware of. By understanding tools, processes, and operations, you’ll be equipped with evolving solutions and strategies to overcome cybersecurity challenges and successfully manage cyber threats to avoid adversaries. By the end of this book, you'll have enough exposure to blue team operations and be able to successfully set up a blue team in your organization.
Table of Contents (18 chapters)
close
close
1
Part 1:Establishing the Blue
14
Part 3:Ask the Experts

Testing incident response plans

In this section, we will demonstrate how to test the incident response plans we learned how to create in the previous section. NIST has created a revision publication called IRS Safeguards Technical Assistance Memorandum Incident Response Test and Exercise Guidance. This section covers Special Publication 800-84, Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities, which provides incident response test and exercise guidance and best practices.

This publication defines tests and two types of exercises:

  • Tabletop exercises are facilitated, discussion-based exercises, where teams can meet and discuss how to resolve an incident if it occurs and have a clear understanding of the roles that each part of the team must play if an incident occurs. In the DDoS scenario, this can be a way to build the incident response plan or to solve any questions about who does what in an incident situation. They can be really useful but...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech

Create a Note

Modal Close icon
You need to login to use this feature.
notes
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Delete Note

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Edit Note

Modal Close icon
Write a note (max 255 characters)
Cancel
Update Note

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY