-
Book Overview & Buying
-
Table Of Contents
SOC Analyst Career Guide
By :
The endpoint is the primary focal point of any attack, whether it is a domain controller or a workstation. It involves a single host getting attacked or compromised. Host-based defenses and security must be advanced to withstand the evolving landscape of endpoint-focused attacks. Furthermore, intimate knowledge of endpoint-based and operating system architecture is important to produce a foundation for security knowledge. As such, this chapter will not exclusively cover security but will cover endpoint and operating system key concepts.
In this chapter, you will master operating system fundamentals for a variety of different architectures, including Windows, macOS, Linux, and ChromeOS. You will fully understand Windows processes, vulnerabilities, system monitor (Sysmon), and Windows event logs, and will augment this knowledge with Sysinternals. Furthermore, you will use Osquery to search across several operating systems for investigation and incident response...