Windows Security Monitoring

Windows Security Monitoring
Author :
Publisher : John Wiley & Sons
Total Pages : 658
Release :
ISBN-10 : 9781119390879
ISBN-13 : 1119390877
Rating : 4/5 (79 Downloads)

Book Synopsis Windows Security Monitoring by : Andrei Miroshnikov

Download or read book Windows Security Monitoring written by Andrei Miroshnikov and published by John Wiley & Sons. This book was released on 2018-03-13 with total page 658 pages. Available in PDF, EPUB and Kindle. Book excerpt: Dig deep into the Windows auditing subsystem to monitor for malicious activities and enhance Windows system security Written by a former Microsoft security program manager, DEFCON "Forensics CTF" village author and organizer, and CISSP, this book digs deep into the Windows security auditing subsystem to help you understand the operating system′s event logging patterns for operations and changes performed within the system. Expert guidance brings you up to speed on Windows auditing, logging, and event systems to help you exploit the full capabilities of these powerful components. Scenario–based instruction provides clear illustration of how these events unfold in the real world. From security monitoring and event patterns to deep technical details about the Windows auditing subsystem and components, this book provides detailed information on security events generated by the operating system for many common operations such as user account authentication, Active Directory object modifications, local security policy changes, and other activities. This book is based on the author′s experience and the results of his research into Microsoft Windows security monitoring and anomaly detection. It presents the most common scenarios people should be aware of to check for any potentially suspicious activity. Learn to: Implement the Security Logging and Monitoring policy Dig into the Windows security auditing subsystem Understand the most common monitoring event patterns related to operations and changes in the Microsoft Windows operating system About the Author Andrei Miroshnikov is a former security program manager with Microsoft. He is an organizer and author for the DEFCON security conference "Forensics CTF" village and has been a speaker at Microsoft′s Bluehat security conference. In addition, Andrei is an author of the "Windows 10 and Windows Server 2016 Security Auditing and Monitoring Reference" and multiple internal Microsoft security training documents. Among his many professional qualifications, he has earned the (ISC)2 CISSP and Microsoft MCSE: Security certifications.


Windows Security Monitoring Related Books

Windows Security Monitoring
Language: en
Pages: 658
Authors: Andrei Miroshnikov
Categories: Computers
Type: BOOK - Published: 2018-03-13 - Publisher: John Wiley & Sons

DOWNLOAD EBOOK

Dig deep into the Windows auditing subsystem to monitor for malicious activities and enhance Windows system security Written by a former Microsoft security prog
Windows Security Monitoring
Language: en
Pages: 652
Authors: Andrei Miroshnikov
Categories: Computers
Type: BOOK - Published: 2018-03-13 - Publisher: John Wiley & Sons

DOWNLOAD EBOOK

Dig deep into the Windows auditing subsystem to monitor for malicious activities and enhance Windows system security Written by a former Microsoft security prog
Mastering Windows Security
Language: en
Pages: 269
Authors: Cybellium Ltd
Categories: Computers
Type: BOOK - Published: 2023-09-26 - Publisher: Cybellium Ltd

DOWNLOAD EBOOK

Unveil the Secrets to Fortifying Windows Systems Against Cyber Threats Are you prepared to take a stand against the evolving landscape of cyber threats? "Master
Purple Team Strategies
Language: en
Pages: 450
Authors: David Routin
Categories: Computers
Type: BOOK - Published: 2022-06-24 - Publisher: Packt Publishing Ltd

DOWNLOAD EBOOK

Leverage cyber threat intelligence and the MITRE framework to enhance your prevention mechanisms, detection capabilities, and learn top adversarial simulation a
Applied Architecture Patterns on the Microsoft Platform
Language: en
Pages: 526
Authors: Richard Seroter
Categories: Computers
Type: BOOK - Published: 2010-09-07 - Publisher: Packt Publishing Ltd

DOWNLOAD EBOOK

An in-depth scenario-driven approach to architecting systems using Microsoft technologies with this book and eBook.