other · 2019

Network Security Monitoring

Cited by 0Abstract and details only

Abstract

Network security monitoring remains a vital component for incident response, threat hunting, and network security in general. This chapter focuses on network activity and explores the Elastic Stack and ways to integrate host-based data to provide enhanced visibility across the network. It examines the architecture for deployment of Security Onion in an enterprise and each of the major tools integrated into the platform. The chapter outlines basic skills to facilitate effective incident response for those situations where the critical data that reader need has not been conveniently placed into Elastic Stack or another analysis platform. The Elastic Stack provides an amazing platform to support incident response, but readers occasionally will need to access other data sources directly on a host or that otherwise have not been ingested into a centralized analysis platform. Web servers, *nix systems, and other applications store many of their logs in a text-based format.

Cite this paper

APA 7

(2019). Network Security Monitoring. https://doi.org/10.1002/9781119560302.ch7

MLA 9

“Network Security Monitoring.” 2019, pp. 161–98, https://doi.org/10.1002/9781119560302.ch7.

Chicago

2019. “Network Security Monitoring.” https://doi.org/10.1002/9781119560302.ch7.

Harvard

(2019) ‘Network Security Monitoring’. Available at: https://doi.org/10.1002/9781119560302.ch7.

BibTeX

@misc{anon2019network,
  title = {{Network Security Monitoring}},
  pages = {161--198},
  year = {2019},
  doi = {10.1002/9781119560302.ch7}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.