I am a Computer Science student and cybersecurity enthusiast specializing in blue team operations. My focus areas include digital forensics, incident response, threat hunting, and SOC operations. I use this space to document my technical security training, share write-ups, and highlight the projects I work on.
Find me on
if you are going too fast to take good notes, you are just going too fast!
so this was the 1st book but of the 2016 version ig and after making these notes i found a newer version so i started all over again but still , its a good book to read <<<<<<
A cybersecurity function focused on detecting, managing, and mitigating adversarial attacks while minimizing impact and recovery time. Coupled with Digital Forensics: Investigates incidents to determine root causes and gather evidence. its Goals are Contain malware infections. Identify and remediate vulnerabilities. Coordinate technical and non-technical personnel.
Events are An observed occurrence (e.g., user login, email sent, antivirus blocking malware).while Incidents are A security policy violation with negative impact (e.g., ransomware, data exfiltration, DoS).
incident Response Process consists of six phases:
the process of Examining malicious software to understand its functionality, behavior, capabilities, and impact.
Four Main Steps:
