Search icon
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Practical Threat Detection Engineering

You're reading from  Practical Threat Detection Engineering

Product type Book
Published in Jul 2023
Publisher Packt
ISBN-13 9781801076715
Pages 328 pages
Edition 1st Edition
Languages
Authors (3):
Megan Roddie Megan Roddie
Profile icon Megan Roddie
Jason Deyalsingh Jason Deyalsingh
Profile icon Jason Deyalsingh
Gary J. Katz Gary J. Katz
Profile icon Gary J. Katz
View More author details

Table of Contents (20) Chapters

Preface 1. Part 1: Introduction to Detection Engineering
2. Chapter 1: Fundamentals of Detection Engineering 3. Chapter 2: The Detection Engineering Life Cycle 4. Chapter 3: Building a Detection Engineering Test Lab 5. Part 2: Detection Creation
6. Chapter 4: Detection Data Sources 7. Chapter 5: Investigating Detection Requirements 8. Chapter 6: Developing Detections Using Indicators of Compromise 9. Chapter 7: Developing Detections Using Behavioral Indicators 10. Chapter 8: Documentation and Detection Pipelines 11. Part 3: Detection Validation
12. Chapter 9: Detection Validation 13. Chapter 10: Leveraging Threat Intelligence 14. Part 4: Metrics and Management
15. Chapter 11: Performance Management 16. Part 5: Detection Engineering as a Career
17. Chapter 12: Career Guidance for Detection Engineers 18. Index 19. Other Books You May Enjoy

Resources and further reading

The following resources provide lists of the sources discussed in this chapter, as well as further informational material related to threat intelligence and MITRE ATT&CK.

Threat intelligence sources and concepts

https://github.com/hslatman/awesome-threat-intelligence

This GitHub repository contains a variety of types of resources related to threat intel including sources, such as threat intel feeds, formats, frameworks, platforms, tools, research, standards, and books.

Online scanners and sandboxes

https://github.com/rshipp/awesome-malware-analysis#online-scanners-and-sandboxes

The Online Scanners and Sandboxes section of this GitHub repository provides a comprehensive listing of tools similar to VirusTotal that can be leveraged for the methods discussed in this chapter.

MITRE ATT&CK

Here are the sources that you can refer to for MITRE ATT&CK:

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $15.99/month. Cancel anytime}