Security Event Triage: Detecting Network Anomalies with Behavioral Analysis

سرفصل های دوره

In this course on network behavioral analysis, you will explore the use of frequency, protocol, and population analysis methodologies to uncover events associated with multiple threat actors intrusions into a simulated enterprise network.

Exercise Files

set-detecting-network-anomalies-behavioral-analysis.zip

Module 1 - Course Overview

1. Course Overview

Module 2 - Introduction to Network Behavioral Analysis

1. Introduction to Network Behavioral Analysis

2. Collecting the Data from Your Network

3. Putting NBAD to Work

4. Practicing How You Play

Module 3 - Frequency Analysis

01. Getting Started with Frequency Analysis

02. What Does a Scan Look Like

03. Identifying Internal and External Scans

04. What Does Beaconing Look Like

05. Identifying Beaconing Activity

06. What Does Command and Control Look Like

07. Identifying Command and Control Behavior

08. What Does Brute Force Look Like

09. Identifying Brute Force Failures and Success

10. Fitting Frequency Analysis into Daily Operations

Module 4 - Protocol Analysis

1. Following the Rules and Protocols

2. Discovering DNS Command and Control

3. Deducing the Activity of Encrypted Web Traffic

4. Analyzing SSH Authentication Behavior

5. Customizing DHCP Detection for Your Network

6. Exploring Other Protocols and Whats Next

Module 5 - Population Analysis

1. Introduction to Population Analysis with Machine Learning

2. Leveraging Machine Learning to Discover Encrypted Exfiltration

3. Investigating Client Device Relationship Anomalies

4. Revealing Hidden Connections

5. Successfully Integrating Network Triage and Population Analysis

Module 6 - Detecting the Anomalies

1. Introducing NBAD to Daily Operations

2. Turning Alerts into Triage Worthy Investigations

3. Recording the Results of NBAD Triage Methods

4. Identifying the Missing Links

5. Putting It All in Perspective

45,900 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: PluralSight