{"product_id":"9781119560265","title":"Applied Incident Response by Steve Anson","description":"Incident response is critical for the active defense of any network, and incident responders need up-to-date, immediately applicable techniques with which to engage the adversary.??Applied Incident Response?details effective ways to respond to advanced attacks against local and remote network resources,?providing proven response techniques and a framework through which to apply them.? As a starting point for new incident handlers, or as a technical reference for hardened IR veterans, this book details the latest techniques for responding to threats against your network, including: Preparing your environment for effective incident responseLeveraging MITRE ATT\u0026amp;CK and threat intelligence for active network defenseLocal and remote triage of systems using PowerShell, WMIC, and open-source toolsAcquiring RAM and disk images locally and remotelyAnalyzing RAM with Volatility and RekallDeep-dive forensic analysis of system drives using open-source or commercial toolsLeveraging Security Onion and Elastic Stack for network security monitoringTechniques for log analysis and aggregating high-value logsStatic and dynamic analysis of malware with YARA rules, FLARE VM, and Cuckoo SandboxDetecting and responding to lateral movement techniques, including pass-the-hash, pass-the-ticket, Kerberoasting, malicious use of PowerShell, and many moreEffective threat hunting techniquesAdversary emulation with Atomic Red TeamImproving preventive and detective controls\u003cbr\u003eBinding: Paperback \/ softback","brand":"Gardners","offers":[{"title":"Default Title","offer_id":56296515109237,"sku":"9781119560265","price":37.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0612\/7193\/3106\/files\/9781119560265.jpg?v=1762771664","url":"https:\/\/backstory.london\/products\/9781119560265","provider":"Backstory","version":"1.0","type":"link"}