It delves into digital forensics, focusing on endpoint forensics (Windows, Linux), memory and disk analysis, and network forensics, including PCAP analysis. Cisco tools like Stealthwatch and SecureX are highlighted for their role in supporting forensic investigations. Intrusion event analysis is discussed extensively, with an emphasis on detecting network and host-based intrusions and analyzing logs from various sources.
Malware analysis is covered in detail, with an exploration of static and dynamic analysis methods, sandboxing techniques, and tools like Cisco Threat Grid and Cuckoo Sandbox. The guide also highlights the importance of data analytics in threat detection, explaining anomaly detection and signature-based detection methods through tools such as Cisco Secure Network Analytics.
Automation and orchestration in cybersecurity are explored through Cisco SecureX, and scripting with Python is introduced for automating security tasks. Finally, the guide provides case studies, real-world scenarios, and insights into integrating various Cisco security platforms for comprehensive security operations management.
Dieser Download kann aus rechtlichen Gründen nur mit Rechnungsadresse in A, B, BG, CY, CZ, D, DK, EW, E, FIN, F, GR, H, IRL, I, LT, L, LR, M, NL, PL, P, R, S, SLO, SK ausgeliefert werden.