The practice of network security monitoring : understanding incident detection and response [E-Book] / by Richard Bejtlich.
Saved in:
Full text |
|
Personal Name(s): | Bejtlich, Richard. |
Imprint: |
San Francisco :
No Starch Press,
2013
|
Physical Description: |
1 online resource (379 pages) : illustrations |
Note: |
englisch |
ISBN: |
9781593275341 (e-book) |
Subject (LOC): |
- Foreword / by Todd Heberlein
- Preface
- Part I. Getting Started
- The Rationale
- Collecting Traffic
- Part II. Security Onion Deployment
- Standalone Deployment
- Distributed Deployment
- Housekeeping
- Part III. Tools
- Command Line Packet Analysis Tools
- Graphical Packet Analysis Tools
- Consoles
- Part III. NSM in Action
- Collection, Analysis, Escalation, and Resolution
- Server-Side Compromise
- Client-Side Compromise
- Extending SO
- Proxies and Checksums
- Conclusion
- Appendix A: Security Onion Scripts and Configuration / by Doug Burks.