Introduction

Identify Security Control Types

Threat Intelligence Sharing

Classifying Threats

Threat Hunting

Network Forensics

Appliance Monitoring

Endpoint Monitoring

Email Monitoring

Configuring Your SIEM

Analyzing Your SIEM

Digital Forensics

Analyzing Network IOCs

Analyzing Host-related IOCs

Analyzing Application-related IOcs

Analyzing Lateral Movement and Pivoting IOCs

Incident Response Preparation

Detection and Containment

Containment, Eradication, Recovery, and Post-incident Actions

Risk Mitigation

Frameworks, Policies, and Procedures

Enumeration Tools

Vulnerability Scanning

Analyzing Output from Vulnerability Scanners

Mitigating Vulnerabilities

Identity and Accesss Management

Network Architecture and Segmentation

Hardware Assurance Best Practices

Specialzed Technology

Non-technical Data and Privacy Controls

Technical Data and Privacy Controls

Mitigate Software Vulnerabilities and Attacks

Mitigate Web Application Vulnerabilities and Attacks

Analyzing Application Assessments

Cloud and Automation

Service-Orieted Architecture

Cloud Infrastructure Assessments

Automation Concepts and Technologies

Conclusion