Lane Defensive Security with Kali Purple

Cybersecurity strategies using ELK Stack and Kali Linux
1. Auflage 2024
ISBN: 978-1-83508-735-0
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 376 Seiten

Defensive Security with Kali Purple combines red team tools from the Kali Linux OS and blue team tools commonly found within a security operations center (SOC) for an all-in-one approach to cybersecurity. This book takes you from an overview of today's cybersecurity services and their evolution to building a solid understanding of how Kali Purple can enhance training and support proof-of-concept scenarios for your technicians and analysts.
After getting to grips with the basics, you'll learn how to develop a cyber defense system for Small Office Home Office (SOHO ) services. This is demonstrated through the installation and configuration of supporting tools such as virtual machines, the Java SDK, Elastic, and related software. You'll then explore Kali Purple's compatibility with the Malcolm suite of tools, including Arkime, CyberChef, Suricata, and Zeek. As you progress, the book introduces advanced features, such as security incident response with StrangeBee's Cortex and TheHive and threat and intelligence feeds. Finally, you'll delve into digital forensics and explore tools for social engineering and exploit development.
By the end of this book, you'll have a clear and practical understanding of how this powerful suite of tools can be implemented in real-world scenarios.

Autoren/Hrsg.

Lane, Karl

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Datensicherheit, Datenschutz
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Schadprogramme (Viren, Trojaner etc.)

Inhaltsverzeichnis

Table of Contents - An Introduction to Cybersecurity

- Kali Linux and the Elk Stack

- Installing the Kali Purple Linux Environment
- Configuring the ELK Stack

- Sending Data to the ELK Stack
- Traffic and Log Analysis
- Intrusion Detection and Prevention Systems
- Security Incident and Response
- Digital Forensics

- Integrating the Red Team and External Tools
- Autopilot, Python, and NIST Control

Über Autor(innen)

Lane Karl :

Karl Lane embarked on his tech journey while stationed at NATO HQ in Brussels, Belgium. A colleague appreciated his writing style and asked for his assistance in creating a text-based game. To accomplish this, he needed to learn Linux and C coding. Following his military service, Karl formally enrolled in college as an IT major and secured a Technical Aide position at the world headquarters of the multinational 3M Company in St. Paul, Minnesota. It was there that he gained experience in software testing. What could be more enjoyable than creating games? Breaking them! Thus began a lengthy career that eventually led him into the field of defensive cybersecurity. Karl and his wife, Britni, have an ever-changing number of children as they are licensed foster parents. When not dedicating time to his family, he can usually be found playing his bass guitar.