Detection Engineering for Beginners

سرفصل های دوره

01-Introduction

01-Welcome!-(7-00-)

02-Theory

01-Security-Operations-(11-38-)

02-Role-Variety-(4-54-)

03-Security-Incident-and-Event-Management-(7-27-)

04-The-Detection-Engineering-Workflow-(14-05-)

05-What-Makes-a-Good-Detection-(4-18-)

06-Technology-Stack-for-Detection-Engineering-(17-05-)

07-MITRE-ATT&CK-Framework-(4-33-)

08-Navigating-the-MITRE-ATT&CK-Matrix-(8-08-)

03-Lab-Setup

01-Lab-Overview-(3-13-)

02-File-Downloads-(2-31-)

03-Importing-ParrotOS-into-VirtualBox-(4-04-)

04-Importing-Windows-11-into-VirtualBox-(3-09-)

05-Ubuntu-VirtualBox-Installation-(5-18-)

06-Creating-a-VM-Snapshot-(2-52-)

07-Disabling-Windows-Defender-(2-26-)

08-Installing-Zeek-(5-42-)

04-Elastic-Setup

01-Elastic-Overview-(8-57-)

02-Signing-Up-for-Elastic-Trial-(3-12-)

03-Trial-Extending-and-New-Trials-(3-55-)

04-Elastic-Agent-Installation-(6-15-)

05-Confirming-Zeek-Logging-With-NMAP-(4-45-)

06-Testing-Windows-Elastic-Agent-Logging-with-EICAR-File-and-PowerShell-(10-44-)

07-Sysmon-Overview-(2-07-)

08-Installing-and-Configuring-Sysmon-(4-30-)

09-Testing-Sysmon-Logging-with-EICAR-File-and-PowerShell-(6-06-)

10-Improving-Our-PowerShell-Visibility-(4-14-)

05-Attack-Scenario-1

01-Attack-Overview-(1-30-)

02-Setting-up-the-Attack-(6-20-)

03-Performing-the-Attack-(5-01-)

04-Creating-our-first-Query-Alert-(12-19-)

05-Creating-our-first-Threshold-Alert-(4-56-)

06-Alert-Confirmation-(9-15-)

06-Attack-Scenario-2

01-Overview-(1-28-)

02-Creating-and-Executing-Attack---Part-1-(6-53-)

03-Creating-and-Executing-Attack---Part-2-(10-51-)

04-Reviewing-the-Attack-(10-28-)

05-Creating-Alerts-(21-02-)

06-Confirming-our-Detections-(11-35-)

07-Attack-Scenario-3

01-Overview-(3-52-)

02-Staging-our-Attack-(16-37-)

03-Creating-and-Executing-our-Attack-(16-27-)

04-Creating-our-Detections-(23-31-)

05-Confirming-our-Detections-(3-42-)

08-Atomic-Red-Team

01-Atomic-Red-Team-Introduction-(4-23-)

02-Installation-(2-37-)

03-Running-our-First-Atomic-(12-19-)

04-Writing-our-First-Atomic-(6-35-)

09-TOML

01-TOML-Overview-(6-21-)

02-Setting-up-a-Development-Environment-(4-02-)

03-Reviewing-Elastic-Rule-TOML-(4-33-)

04-Working-with-the-Elastic-Detection-Rules-Repo-(7-58-)

05-Validating-TOML-Syntax-Using-Taplo-(6-28-)

06-Creating-an-Elastic-TOML-Template-(8-40-)

07-Enforcing-TOML-Required-Fields-(17-48-)

08-Creating-a-MITRE-Object-in-Python-(28-08-)

09-Working-with-Multiple-TOML-Files-(10-41-)

10-Validating-MITRE-Data-in-our-TOML---Part-1-(14-39-)

11-Validating-MITRE-Data-in-our-TOML---Part-2-(14-39-)

12-Converting-and-Validating-our-Detections-(6-59-)

10-Elastic-API

01-Introduction-(1-05-)

02-Obtaining-your-API-Key-(1-58-)

03-Pushing-a-Sample-Rule-(7-35-)

04-Writing-a-TOML-to-JSON-Script-(18-59-)

05-GET-ing-Our-First-Rule-and-Managing-Rule-IDs-(8-12-)

06-Working-with-our-Custom-Detections-(18-28-)

07-Updating-our-Custom-Detections-(4-18-)

11-GitHub

01-Overview-(7-46-)

02-GitHub-Actions-Introduction-(5-24-)

03-Uploading-our-Detections-and-Code-(6-14-)

04-Creating-our-TOML-Validation-Action-(11-36-)

05-Enforcing-Validation-Checks-(6-28-)

06-Syncing-with-Elastic---Part-1-(7-45-)

07-Syncing-with-Elastic---Part-2-(19-03-)

12-Metrics

01-Overview-(2-02-)

02-Converting-our-TOML-to-CSV-(16-47-)

03-Converting-TOML-to-MD-(16-53-)

04-Converting-our-TOML-to-Att&ck-Navigator-.JSON-(14-35-)

05-Creating-our-Metrics-GitHub-Action-(17-11-)

06-Creating-Status-Badges-(2-14-)

13-Conclusion

01-Farewell-(4-00-)

179,000 تومان

افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

شناسه: 44938

حجم: 2120 مگابایت

مدت زمان: 850 دقیقه

تاریخ انتشار: ۱ تیر ۱۴۰۴

دسته بندی محصول

آموزش ضد هک و امنیت شبکه