{"product_id":"cybersecurity-blue-team-toolkit-isbn-9781119552932","title":"Cybersecurity Blue Team Toolkit","description":"\u003cp\u003e\u003cb\u003eA practical handbook to cybersecurity for both tech and non-tech professionals\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eAs reports of major data breaches fill the headlines, it has become impossible for any business, large or small, to ignore the importance of cybersecurity. Most books on the subject, however, are either too specialized for the non-technical professional or too general for positions in the IT trenches. Thanks to author Nadean Tanner’s wide array of experience from teaching at a University to working for the Department of Defense, the \u003ci\u003eCybersecurity Blue Team Toolkit\u003c\/i\u003e strikes the perfect balance of substantive and accessible, making it equally useful to those in IT or management positions across a variety of industries. This handy guide takes a simple and strategic look at best practices and tools available to both cybersecurity management and hands-on professionals, whether they be new to the field or looking to expand their expertise.\u003c\/p\u003e \u003cp\u003eTanner gives comprehensive coverage to such crucial topics as security assessment and configuration, strategies for protection and defense, offensive measures, and remediation while aligning the concept with the right tool using the CIS Controls version 7 as a guide. Readers will learn why and how to use fundamental open source and free tools such as ping, tracert, PuTTY, pathping, sysinternals, NMAP, OpenVAS, Nexpose Community, OSSEC, Hamachi, InSSIDer, Nexpose Community, Wireshark, Solarwinds Kiwi Syslog Server, Metasploit, Burp, Clonezilla and many more.\u003c\/p\u003e \u003cp\u003eUp-to-date and practical cybersecurity instruction, applicable to both management and technical positions\u003c\/p\u003e \u003cul\u003e \u003cli\u003eStraightforward explanations of the theory behind cybersecurity best practices\u003c\/li\u003e \u003cli\u003eDesigned to be an easily navigated tool for daily use\u003c\/li\u003e \u003cli\u003eIncludes training appendix on Linux, how to build a virtual lab and glossary of key terms\u003c\/li\u003e \u003c\/ul\u003e \u003cp\u003eThe \u003ci\u003eCybersecurity Blue Team Toolkit\u003c\/i\u003e is an excellent resource for anyone working in digital policy as well as IT security professionals, technical analysts, program managers, and Chief Information and Technology Officers. This is one handbook that won’t gather dust on the shelf, but remain a valuable reference at any career level, from student to executive.\u003c\/p\u003e \u003cp\u003eForeword xxi\u003c\/p\u003e \u003cp\u003eIntroduction xxiii\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 1 Fundamental Networking and Security Tools 1\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003ePing 1\u003c\/p\u003e \u003cp\u003eIPConfig 4\u003c\/p\u003e \u003cp\u003eNSLookup 7\u003c\/p\u003e \u003cp\u003eTracert 9\u003c\/p\u003e \u003cp\u003eNetStat 10\u003c\/p\u003e \u003cp\u003ePuTTY 14\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 2 Troubleshooting Microsoft Windows 17\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eRELI 18\u003c\/p\u003e \u003cp\u003ePSR 19\u003c\/p\u003e \u003cp\u003ePathPing 21\u003c\/p\u003e \u003cp\u003eMTR 23\u003c\/p\u003e \u003cp\u003eSysinternals 24\u003c\/p\u003e \u003cp\u003eThe Legendary God Mode 28\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 3 Nmap—The Network Mapper 31\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eNetwork Mapping 32\u003c\/p\u003e \u003cp\u003ePort Scanning 34\u003c\/p\u003e \u003cp\u003eServices Running 36\u003c\/p\u003e \u003cp\u003eOperating Systems 38\u003c\/p\u003e \u003cp\u003eZenmap 39\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 4 Vulnerability Management 43\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eManaging Vulnerabilities 43\u003c\/p\u003e \u003cp\u003eOpenVAS 46\u003c\/p\u003e \u003cp\u003eNexpose Community 50\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 5 Monitoring with OSSEC 57\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eLog-Based Intrusion Detection Systems 57\u003c\/p\u003e \u003cp\u003eAgents 61\u003c\/p\u003e \u003cp\u003eAdding an Agent 63\u003c\/p\u003e \u003cp\u003eExtracting the Key for an Agent 64\u003c\/p\u003e \u003cp\u003eRemoving an Agent 64\u003c\/p\u003e \u003cp\u003eLog Analysis 65\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 6 Protecting Wireless Communication 67\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003e802.11 67\u003c\/p\u003e \u003cp\u003einSSIDer 70\u003c\/p\u003e \u003cp\u003eWireless Network Watcher 71\u003c\/p\u003e \u003cp\u003eHamachi 72\u003c\/p\u003e \u003cp\u003eTor 78\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 7 Wireshark 83\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eWireshark 83\u003c\/p\u003e \u003cp\u003eOSI Model 86\u003c\/p\u003e \u003cp\u003eCapture 89\u003c\/p\u003e \u003cp\u003eFilters and Colors 92\u003c\/p\u003e \u003cp\u003eInspection 93\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 8 Access Management 97\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eAAA 98\u003c\/p\u003e \u003cp\u003eLeast Privilege 99\u003c\/p\u003e \u003cp\u003eSingle Sign-On 101\u003c\/p\u003e \u003cp\u003eJumpCloud 103\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 9 Managing Logs 109\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eWindows Event Viewer 110\u003c\/p\u003e \u003cp\u003eWindows PowerShell 112\u003c\/p\u003e \u003cp\u003eBareTail 116\u003c\/p\u003e \u003cp\u003eSyslog 117\u003c\/p\u003e \u003cp\u003eSolarWinds Kiwi 120\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 10 Metasploit 125\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eReconnaissance 127\u003c\/p\u003e \u003cp\u003eInstallation 128\u003c\/p\u003e \u003cp\u003eGaining Access 135\u003c\/p\u003e \u003cp\u003eMetasploitable2 139\u003c\/p\u003e \u003cp\u003eVulnerable Web Services 144\u003c\/p\u003e \u003cp\u003eMeterpreter 146\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 11 Web Application Security 147\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eWeb Development 148\u003c\/p\u003e \u003cp\u003eInformation Gathering 151\u003c\/p\u003e \u003cp\u003eDNS 153\u003c\/p\u003e \u003cp\u003eDefense in Depth 155\u003c\/p\u003e \u003cp\u003eBurp Suite 156\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 12 Patch and Configuration Management 165\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003ePatch Management 166\u003c\/p\u003e \u003cp\u003eConfiguration Management 173\u003c\/p\u003e \u003cp\u003eClonezilla Live 179\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 13 Securing OSI Layer 8 187\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eHuman Nature 188\u003c\/p\u003e \u003cp\u003eHuman Attacks 192\u003c\/p\u003e \u003cp\u003eEducation 193\u003c\/p\u003e \u003cp\u003eThe Social Engineer Toolkit 195\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 14 Kali Linux 205\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eVirtualization 206\u003c\/p\u003e \u003cp\u003eOptimizing Kali Linux 219\u003c\/p\u003e \u003cp\u003eUsing Kali Linux Tools 221\u003c\/p\u003e \u003cp\u003eMaltego 222\u003c\/p\u003e \u003cp\u003eRecon-ng 223\u003c\/p\u003e \u003cp\u003eSparta 225\u003c\/p\u003e \u003cp\u003eMacChanger 225\u003c\/p\u003e \u003cp\u003eNikto 226\u003c\/p\u003e \u003cp\u003eKismet 227\u003c\/p\u003e \u003cp\u003eWiFite 228\u003c\/p\u003e \u003cp\u003eJohn the Ripper 229\u003c\/p\u003e \u003cp\u003eHashcat 230\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 15 CISv7 Controls and Best Practices 235\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eCIS Basic Controls—The Top Six 236\u003c\/p\u003e \u003cp\u003eInventory and Control of Hardware Assets 236\u003c\/p\u003e \u003cp\u003eInventory and Control of Software Assets 238\u003c\/p\u003e \u003cp\u003eContinuous Vulnerability Management 239\u003c\/p\u003e \u003cp\u003eControlled Use of Administrative Privileges 240\u003c\/p\u003e \u003cp\u003eSecure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers 241\u003c\/p\u003e \u003cp\u003eMaintenance, Monitoring, and Analysis of Audit Logs 246\u003c\/p\u003e \u003cp\u003eIn Conclusion 248\u003c\/p\u003e \u003cp\u003eIndex 249\u003c\/p\u003e  \u003cp\u003e\u003cb\u003eNadean H. Tanner\u003c\/b\u003e has been in the technology industry for over 20 years in a variety of positions from marketing to training to web development to hardware. She has worked in academia as an IT director and a postgraduate technology instructor. She has also been a trainer and consultant in advanced cybersecurity for Fortune 500 companies as well as the U.S. Department of Defense.   \u003c\/p\u003e\u003cp\u003e\u003cb\u003eA practical cybersecurity handbook for both tech and non-tech professionals\u003c\/b\u003e  \u003c\/p\u003e\u003cp\u003eThere are plenty of books exploring the individual, highly technical components of cybersecurity. They offer specialized, narrowly focused training on a multitude of topics and technologies. But the resources available for end users and managers in need of clear, straightforward, and strategic guidance on the best practices and available tools of cybersecurity are surprisingly limited.  \u003c\/p\u003e\u003cp\u003e\u003ci\u003eThe Cybersecurity Blue Team Toolkit\u003c\/i\u003e is an informative, accurate, and practical handbook that provides up-todate instruction for those in hands-on management and technical positions. This balanced, comprehensive guide helps readers navigate the various cybersecurity philosophies, frameworks, vendors, and compliances to arrive at optimal solutions to protect dynamic, multifaceted environments in real-world situations. Readers new to the industry or those seeking to expand their expertise will gain knowledge of fundamental networking and security tools, Microsoft Windows troubleshooting, network mapping, vulnerability management, web application security, patch configuration, and much more. Substantive yet easy-to-read chapters cover the practice and underlying theory of cybersecurity–from assessment, configuration, protection, and defense strategies, to remediation and offensive measures.  \u003c\/p\u003e\u003cp\u003eAuthor Nadean H. Tanner draws from her extensive experience in both academia and the Department of Defense to provide a unique perspective on cybersecurity tools and methods applicable to a wide spectrum of industries and sectors. An invaluable addition to the desk of anyone tasked with pinging an asset, running a tracert, or pinpointing the physical and logical addresses of an unresponsive web server, this book:  \u003c\/p\u003e\u003cul\u003e \u003cli\u003eSatisfies a significant need for a practical, not overly technical guidebook for cybersecurity professionals\u003c\/li\u003e \u003cli\u003ePresents clear and user#45;friendly explanations of cybersecurity in both theory and practice\u003c\/li\u003e \u003cli\u003eCovers tools such as PuTTY, pathping, sysinternals\u003csup\u003e®\u003c\/sup\u003e, NMAP\u003csup\u003e®\u003c\/sup\u003e, OpenVAS, Metasploit\u003csup\u003e®\u003c\/sup\u003e, and WireShark\u003csup\u003e®\u003c\/sup\u003e\n\u003c\/li\u003e \u003cli\u003eIncludes instructions on virtual lab construction, exercises, and illustrations\u003c\/li\u003e \u003c\/ul\u003e","brand":"Wiley","offers":[{"title":"Default Title","offer_id":47989019181285,"sku":"NP9781119552932","price":42.0,"currency_code":"USD","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1842\/7735\/files\/9781119552932.jpg?v=1761782459","url":"https:\/\/k12savings.com\/es\/products\/cybersecurity-blue-team-toolkit-isbn-9781119552932","provider":"K12savings","version":"1.0","type":"link"}