Understanding Diamond Model Of Intrusion Analysis
Diamond Model Overview The Diamond Model of Intrusion Analysis is made up of four parts, as shown in the figure. The model represents a security […]
Understanding Cyber Killer Chain In Cybersecurity
Steps of the Cyber Killer Chain The Cyber Killer Chain was developed by Lockheed Martin to identify and prevent cyber intrusions. There are seven steps […]
Understanding Digital Forensics In Cybersecurity
Understanding Digital Forensics In Cybersecurity Now that you have investigated and identified valid alerts, what do you do with the evidence? The cybersecurity analyst will […]
Dashboard And Visualisation For Cyber Analysts
Dashboards and Visualizations Dashboards provide a combination of data and visualizations that are designed to improve access to and interpretation of large amounts of information. […]
Using Sguil In Investigating Network Data
Using Sguil In Investigating Network Data The primary duty of a cybersecurity analyst is the verification of security alerts. Depending on the organization, the […]
Understanding Elastic Data Core Components In Cybersecurity
Understanding Elastic Data Core Components in Cybersecurity A typical network has a multitude of different logs to keep track of and most of […]
Need For Alert Evaluation In Cybersecurity
Need For Alert Evaluation In Cybersecurity The threat landscape is constantly changing as new vulnerabilities are discovered and new threats evolve. As a user and […]
Use Of Security Onion As A Source Of Alerts
Use Of Security Onion As A Source Of Alerts Security Onion is an open-source suite of Network Security Monitoring (NSM) tools that run on an […]
Understanding Network Logs In Cybersecurity
Understanding Network Logs In Cybersecurity The tcpdump command-line tool is a very popular packet analyzer. It can display packet captures in real-time or write packet […]
6 Types Of End Device Logs In Cybersecurity
6 Types Of End Device Logs In Cybersecurity As previously discussed, host-based intrusion detection systems (HIDS) run on individual hosts. HIDS not only detects intrusions […]
7 Types Of Security Data In Cybersecurity
Alert Data Alert data consists of messages generated by intrusion prevention systems (IPSs) or intrusion detection systems (IDSs) in response to traffic that violates a […]
Understanding Access Control List In Cybersecurity
Understanding Access Control List In Cybersecurity Many technologies and protocols can have impacts on security monitoring. Access Control Lists (ACLs) are among these technologies. ACLs […]
Monitoring Syslog And NTP Protocols Effectively
Monitoring Syslog And NTP Protocols Effectively Various protocols that commonly appear on networks have features that make them of special interest in security monitoring. For […]
Understanding Information Security Management System
Understanding Information Security Management System An Information Security Management System (ISMS) consists of a management framework through which an organization identifies, analyzes, and addresses […]
Understanding Risk Management In Cybersecurity
Understanding Risk Management In Cybersecurity Risk management in cybersecurity involves the selection and specification of security controls for an organization. It is part of an […]