Security Event Triage: Monitoring Assets and Topology

Focused View

Daniel Lachance

1:36:43

96 View

Exercise Files

security-event-triage-monitoring-assets-topology.zip

Module 1 - Course Overview

1. Course Overview.mp4

01:05

Module 2 - Network Device Inventory

1. Module Introduction.mp4

01:21

2. Assets and IT Risk Management.mp4

04:57

3. Baselining the Network Environment.mp4

03:10

4. Gathering Network Device Inventory.mp4

05:51

5. Demo - Scan for network Devices Using PowerShell.mp4

03:52

6. Analyzing Network Device Inventory.mp4

04:41

7. Demo - Review Spiceworks Network Device Inventory.mp4

03:04

8. Demo - Analyze Network Device Traffic Using Grassmarlin.mp4

02:43

9. Module Summary.mp4

01:11

Module 3 - Network Scanning

1. Module Introduction.mp4

01:51

2. Network Scanning.mp4

06:51

3. Network Services.mp4

04:55

4. Demo - Analyze nmap Scan Results.mp4

04:00

5. Network Device Roles.mp4

05:21

6. Demo - Compare 2 nmap Scans to Identify Differences.mp4

03:29

7. Demo - Use the Kibana Interface to Identify Suspicious Hosts.mp4

05:22

8. Module Summary.mp4

01:12

Module 4 - Detecting Vulnerabilities

1. Module Introduction.mp4

01:06

2. Network and Vulnerability Scanning.mp4

05:06

3. Vulnerability Scanning.mp4

07:14

4. Demo - Interpret OpenVAS Scan Results.mp4

06:35

5. Device Security Compliance.mp4

01:55

6. Demo - Use PowerShell DSC to Ensure Compliance.mp4

04:26

7. Demo - Use Microsoft System Center Configuration Manager to Identify Non-compliance.mp4

04:24

8. Module Summary.mp4

01:01

Description

Protecting your network is now more important than ever. You can accomplish this by comparing what you know should be on the network to current network and vulnerability scans in order to identify abnormal network devices and traffic.

What You'll Learn?

Being able to identify what should and what shouldn't be on your network is the first step in identifying suspicious activity on your network. In this course, Security and Event Triage: Monitoring Assets and Topology, you will learn the techniques that can help you identify potential security breaches. First, you'll learn about the importance of continuously inventorying network devices so that you know what should be on your network. Next, you'll see how to analyze network device scans and network traffic patterns to establish a baseline and to identify anomalies. Finally, you'll explore how to analyze network vulnerability scans to identify weaknesses that require attention. When you're finished with this course, you'll know how to quickly and effectively identify network anomalies.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Cyber Security

Network Security

Information Security

Daniel Lachance

Instructor's Courses

Daniel Lachance, CompTIA Security+, CompTIA A+®, CompTIA Network+®, CompTIA Server+, CompTIA Cloud Essentials, MCITP, MCTS, MCSA, is the owner of Lachance IT Consulting Inc. He is the author of the CompTIA Server+ Certification All-in-One Exam Guide, CompTIA Cloud Essentials Certification Study Guide, and co-author of CompTIA Security+ Certification Practice Exams. Mr. Lachance is an experienced trainer having delivered IT training in Canada and the Caribbean since the 1990s on topics ranging from various Microsoft products including Visual Basic, Hyper-V and System Center Configuration Manager, as well as other products including UNIX, Linux, Novell and IBM Notes, and Domino. Dan has further experience with Microsoft Azure, Amazon Web Services, Google G Suite, and Linux.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.