As defenders, we must contend with targeted and opportunistic attacks against web infrastructure. We need a way to mitigate these attacks while maintaining global availability of enterprise web services. In this course, Application Analysis with ModSecurity, you’ll cover how to utilize ModSecurity to secure a live enterprise environment. First, you’ll learn how to use the Open Web Application Security Project (OWASP) Core Rule Set (CRS). Next, you’ll explore how to detect and block SQL injection attacks. Finally, you’ll discover how to mitigate brute force credential stuffing attacks. When you’re finished with this course, you’ll have the skills and knowledge to detect and mitigate web-based threats against your web applications using ModSecurity.
Author Name: Michael Edie
Author Description:
Michael is a Senior Security Consultant with 10+ years of experience in the public and private sectors. He is a proactive and iterative cyber threat hunter specializing in detection engineering, DFIR, and automation. Michael has led teams and directed collaborative efforts to develop and implement strategies for mitigating evolving threat trends. He is the Founder and Principal Consultant of Sawbox Consulting, where he identifies and resolves security issues, implements solutions and evaluates s… more

Table of Contents

• Course Overview (Tool Introduction)
  1min
• Detection with ModSecurity
  21mins
• Resources
  1min