000			04277cam a22002778i 4500
003			SA-RiNAUS
005			20250906114213.0
008			240606s2024 xxk g b 001 0 eng
020			_a9781837632152
040			_aSA-RiNAUS _bara _cSA-RiNAUS _erda
082	0	0	_a005.8 _221 _bG R S
100	1		_a Guptam, Rajneesh _eauthor. _945332
245	1	0	_aSecurity monitoring with wazuh : _bdefinitive guide to uncover effective enterprise security using real-life use cases in Wazuh / _cRajneesh Gupta.
264		1	_a[Birmingham] : _bPackt Publishing Ltd., _c2024.
300			_a303 pages ; _c24 cm
500			_aIncludes bibliographical references and index.
500			_aمقررات دراسية 2025-2026.
520			_aLearn how to set up zero-cost security automation, incident response, file integrity monitoring systems, and cloud security monitoring from scratch Key Features Get a thorough overview of Wazuh's features and learn how to make the most of them Detect network and host-based intrusion, monitor for known vulnerabilities and exploits, and detect anomalous behavior Build a monitoring system for security compliance that adheres to frameworks such as MITRE ATT&CK, PCI DSS, and GDPR Purchase of the print or Kindle book includes a free PDF eBook Book Description Explore the holistic solution that Wazuh offers to improve your organization's cybersecurity posture with this insightful guide. Security Monitoring with Wazuh is a comprehensive resource, covering use cases, tool integration, and compliance monitoring to equip you with the skills you need to build an enterprise-level defense system. The book begins by setting up an Intrusion Detection System (IDS), integrating the open-source tool Suricata with the Wazuh platform, and then explores topics such as network and host-based intrusion detection, monitoring for known vulnerabilities, exploits, and detecting anomalous behavior. As you progress, you'll learn how to leverage Wazuh's capabilities to set up Security Orchestration, Automation, and Response (SOAR). The chapters will lead you through the process of implementing security monitoring practices aligned with industry standards and regulations. You'll also master monitoring and enforcing compliance with frameworks such as PCI DSS, GDPR, and MITRE ATT&CK, ensuring that your organization maintains a strong security posture while adhering to legal and regulatory requirements. By the end of this book, you'll be proficient in harnessing the power of Wazuh and have a deeper understanding of effective security monitoring strategies. What you will learn Find out how to set up an intrusion detection system with Wazuh Get to grips with setting up a file integrity monitoring system Deploy Malware Information Sharing Platform (MISP) for threat intelligence automation to detect indicators of compromise (IOCs) Explore ways to integrate Shuffle, TheHive, and Cortex to set up security automation Apply Wazuh and other open source tools to address your organization's specific needs Integrate Osquery with Wazuh to conduct threat hunting Who this book is for This book is for SOC analysts, security architects, and security engineers who want to set up open-source SOC with critical capabilities such as file integrity monitoring, security monitoring, threat intelligence automation, and cloud security monitoring. Managed service providers aiming to build a scalable security monitoring system for their clients will also find valuable insights in this book. Familiarity with basic IT, cybersecurity, cloud, and Linux concepts is necessary to get started Moving forward, the book provides a practical explanation of the F3EAD protocol with the help of examples. Furthermore, we learn how to go about threat models and intelligence products/frameworks and apply them to real-life scenarios. By the end of this book, you will be able to boot up an intelligence program in your organization based on the operation and tactical/strategic spheres of Cyber defense intelligence.
650		4	_aComputer crimes _xInvestigation.
650		4	_a Computer security Management _945333
650		4	_aComputer security _vSoftware _945334
942			_2ddc _cBK
999			_c35039 _d35038