␡
- “Do I Know This Already?” Quiz
- “Do I Know This Already?” Quiz
- Foundation Topics
- Threat Hunting
- Threat Hunting
- Vulnerability Scans
- Vulnerability Scans
- Logs and Security Information and Event Management (SIEM)
- Logs and Security Information and Event Management (SIEM)
- Security Orchestration, Automation, and Response (SOAR)
- Security Orchestration, Automation, and Response (SOAR)
- Chapter Review Activities
- Review Key Topics
- Review Key Topics
- Define Key Terms
- Define Key Terms
- Review Questions
- Review Questions
This chapter is from the book
This chapter is from the book
This chapter is from the book
This chapter is from the book
Define Key Terms
Define the following key terms from this chapter, and check your answers in the glossary:
threat hunting
threat feeds
intelligence fusion
security advisories
Common Vulnerability and Exposures (CVE)
false positives
false negatives
true positive
true negative
application scanners
web application scanners
network and port scanners
review logs
configuration reviews
intrusive
nonintrusive
CVSS
base group
temporal group
environmental group
Security Information and Event Management (SIEM)
security monitoring
log collector
data input
Log aggregation
IPFIX
packet captures
user behavior analysis
sentiment analysis
Security Orchestration, Automation, and Response (SOAR)
