-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating
Incident Response for Windows
By :
Incident Response for Windows
By:
Overview of this book
Cybersecurity incidents are becoming increasingly common and costly, making incident response a critical domain for organizations to understand and implement. This book enables you to effectively detect, respond to, and prevent cyberattacks on Windows-based systems by equipping you with the knowledge and tools needed to safeguard your organization's critical assets, in line with the current threat landscape.
The book begins by introducing you to modern sophisticated cyberattacks, including threat actors, methods, and motivations. Then, the phases of efficient incident response are linked to the attack's life cycle using a unified cyber kill chain. As you advance, you'll explore various types of Windows-based platform endpoint forensic evidence and the arsenal necessary to gain full visibility of the Windows infrastructure. The concluding chapters discuss the best practices in the threat hunting process, along with proactive approaches that you can take to discover cybersecurity incidents before they reach their final stage.
By the end of this book, you’ll have gained the skills necessary to run intelligence-driven incident response in a Windows environment, establishing a full-fledged incident response and management process, as well as proactive methodologies to enhance the cybersecurity posture of an enterprise environment.
Table of Contents (20 chapters)
Preface
Part 1: Understanding the Threat Landscape and Attack Life Cycle
Free Chapter
Chapter 1: Introduction to the Threat Landscape
Chapter 2: Understanding the Attack Life Cycle
Part 2: Incident Response Procedures and Endpoint Forensic Evidence Collection
Chapter 3: Phases of an Efficient Incident Response on Windows Infrastructure
Chapter 4: Endpoint Forensic Evidence Collection
Part 3: Incident Analysis and Threat Hunting on Windows Systems
Chapter 5: Gaining Access to the Network
Chapter 6: Establishing a Foothold
Chapter 7: Network and Key Assets Discovery
Chapter 8: Network Propagation
Chapter 9: Data Collection and Exfiltration
Chapter 10: Impact
Chapter 11: Threat Hunting and Analysis of TTPs
Part 4: Incident Investigation Management and Reporting
Chapter 12: Incident Containment, Eradication, and Recovery
Chapter 13: Incident Investigation Closure and Reporting
Index
Customer Reviews
