Pease Threat Hunting with Elastic Stack

Solve complex security challenges with integrated prevention, detection, and response
1. Auflage 2021
ISBN: 978-1-80107-980-8
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 392 Seiten

No detailed description available for "Threat Hunting with Elastic Stack".

Autoren/Hrsg.

Pease, Andrew

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit
• Mathematik | Informatik EDV | Informatik Technische Informatik Systemverwaltung & Management
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit

Inhaltsverzeichnis

Table of Contents - Introduction to Cyber Threat Intelligence, Analytical Models, and Frameworks
- Hunting Concepts, Methodologies, and Techniques
- Introduction to the Elastic Stack
- Building Your Hunting Lab – Part 1
- Building Your Hunting Lab – Part 2
- Data Collection with Beats and Elastic Agent
- Using Kibana to Explore and Visualize Data
- The Elastic Security App
- Using Kibana to Pivot Through Data to Find Adversaries
- Leveraging Hunting to Inform Operations
- Enriching Data to Make Intelligence
- Sharing Information and Analysis

Über Autor(innen)

Pease Andrew:

Andrew Pease began his journey into information security in 2002. He has performed security monitoring, incident response, threat hunting, and intelligence analysis for various organizations from the United States Department of Defense, a biotechnology company, and co-founded a security services company called Perched, which was acquired by Elastic in 2019. Andrew is currently employed with Elastic as a Principal Security Research Engineer where he performs intelligence and analytics research to identify adversary activity on contested networks. He has been using Elastic for network and endpoint-based threat hunting since 2013, He has developed training on security workloads using the Elastic Stack since 2017, and currently works with a team of brilliant engineers that develop detection logic for the Elastic Security App.