␡
- “Do I Know This Already?” Quiz
- “Do I Know This Already?” Quiz
- Foundation Topics
- Threat Hunting
- Threat Hunting
- Vulnerability Scans
- Vulnerability Scans
- Logs and Security Information and Event Management (SIEM)
- Logs and Security Information and Event Management (SIEM)
- Security Orchestration, Automation, and Response (SOAR)
- Security Orchestration, Automation, and Response (SOAR)
- Chapter Review Activities
- Review Key Topics
- Review Key Topics
- Define Key Terms
- Define Key Terms
- Review Questions
- Review Questions
This chapter is from the book
This chapter is from the book
This chapter is from the book
This chapter is from the book
Review Key Topics
Review the most important topics in the chapter, noted with the Key Topic icon in the outer margin of the page. Table 7-3 lists a reference of these key topics and the page number on which each is found.
Table 7-3 Key Topics for Chapter 7
Key Topic Element |
Description |
Page Number |
|---|---|---|
Paragraph |
Defining threat hunting |
175 |
Paragraph |
Understanding security advisories, bulletins, and what a CVE is |
177 |
Paragraph |
Understanding false positives and false negatives |
181 |
Section |
Credentialed vs. Noncredentialed |
182 |
Section |
Intrusive vs. Nonintrusive |
182 |
Paragraph |
Defining what SIEM is |
186 |
Paragraph |
Understanding the SOAR concept |
188 |
