Security Event Triage: Leveraging Existing Security Device Alerts
|
Identifying suspicious network activity can prevent serious security breaches. By monitoring centralized device logs you can catch potential security problems in a timely manner.
Identifying suspicious activity on your network can be achieved by analyzing security device logs. In this course, Security Event Triage: Leveraging Existing Security Device Alerts, you’ll learn how to analyze security device logs looking for security problems. First, you’ll learn about network security devices and the relationship between the OSI model and the ability to decipher the meaning of network traffic captures. Next, you’ll see how to analyze firewall logs to identify abnormal activity which could indicate a security compromise, and how analyzing network access control (NAC) logs can identify questionable host and network connectivity for unauthenticated as well as authenticated devices. Finally, you’ll explore how to use cloud-based methods such as cloud packet capturing and centralized security monitoring to identify potential security problems in the cloud. When you’re done with this course, you’ll have the foundational knowledge of continuous monitoring and interpretation of correlated log events needed to gain the best possible picture of network security events.
Author Name: Daniel Lachance
Author Description:
Daniel Lachance, CompTIA Security+, CompTIA A+®, CompTIA Network+®, CompTIA Server+, CompTIA Cloud Essentials, MCITP, MCTS, MCSA, is the owner of Lachance IT Consulting Inc. He is the author of the CompTIA Server+ Certification All-in-One Exam Guide, CompTIA Cloud Essentials Certification Study Guide, and co-author of CompTIA Security+ Certification Practice Exams. Mr. Lachance is an experienced trainer having delivered IT training in Canada and the Caribbean since the 1990s on topics ranging f… more
Table of Contents
- Course Overview
1min - Network Security Devices
20mins - Identifying Threats Using Firewall Logs
18mins - Identifying Network Threats Using NAC Logs
13mins - Security in the Cloud
25mins
User Reviews
Be the first to review “Security Event Triage: Leveraging Existing Security Device Alerts”
Related Products
Introduction to Browser Security Headers
Browser security headers provide a means for websites to describe how they should behave when loaded into the client. By specifying expected and allowable behaviors, security headers can thwart a number of otherwise serious attacks against websites.
Creating Security Baselines in Microsoft Azure
This course will teach you about Security Baselines, which are part of the Microsoft Cloud Adoption Framework for Azure. You'll learn how to identify security risks, create policy statements to address them, and implement secure designs in Azure.
Performing Malware Analysis on Malicious Documents
Malicious documents have become a form of malware that all incident responders need to be able to analyze. This course will teach you how to analyze malicious Adobe PDF and Microsoft Office documents, along with any malicious scripts they contain.
Physical Security
Most information security professionals find the domain of physical security to be one of their hardest areas. This course outlines the concepts of physical security and will help you understand physical security requirements and implementation.
Malware Analysis: Identifying and Defeating Code Obfuscation
Malware authors routinely utilize obfuscation techniques to complicate the analysis of their code. This course will teach you techniques for identifying and defeating code obfuscation so that key characteristics and behaviors can be identified.
Security Engineering: Secure Endpoints
Endpoint security is an important consideration when evaluating the overall security of your systems. This course will teach you how to harden and monitor Windows, Linux, and container endpoints.
There are no reviews yet.