Cover Page: iii Foreword Page: xxi Introduction Page: xxiii CHAPTER 1: Fundamental Networking and Security Tools Page: 1 Ping Page: 1 IPConfig Page: 4 NSLookup Page: 7 Tracert Page: 8 NetStat Page: 10 PuTTY Page: 14 CHAPTER 2: Troubleshooting Microsoft Windows Page: 17 RELI Page: 18 PSR Page: 19 PathPing Page: 21 MTR Page: 23 Sysinternals Page: 24 The Legendary God Mode Page: 28 CHAPTER 3: Nmap—The Network Mapper Page: 31 Network Mapping Page: 32 Port Scanning Page: 34 Services Running Page: 36 Operating Systems Page: 38 Zenmap Page: 39 CHAPTER 4: Vulnerability Management Page: 43 Managing Vulnerabilities Page: 43 OpenVAS Page: 46 Nexpose Community Page: 50 CHAPTER 5: Monitoring with OSSEC Page: 57 Log‐Based Intrusion Detection Systems Page: 57 Agents Page: 61 Log Analysis Page: 65 CHAPTER 6: Protecting Wireless Communication Page: 67 802.11 Page: 67 inSSIDer Page: 70 Wireless Network Watcher Page: 71 Hamachi Page: 72 Tor Page: 78 CHAPTER 7: Wireshark Page: 83 Wireshark Page: 83 OSI Model Page: 86 Capture Page: 89 Filters and Colors Page: 92 Inspection Page: 93 CHAPTER 8: Access Management Page: 97 AAA Page: 98 Least Privilege Page: 99 Single Sign‐On Page: 101 JumpCloud Page: 103 CHAPTER 9: Managing Logs Page: 109 Windows Event Viewer Page: 110 Windows PowerShell Page: 112 BareTail Page: 116 Syslog Page: 117 SolarWinds Kiwi Page: 120 CHAPTER 10: Metasploit Page: 125 Reconnaissance Page: 127 Installation Page: 128 Gaining Access Page: 135 Metasploitable2 Page: 139 Vulnerable Web Services Page: 144 Meterpreter Page: 146 CHAPTER 11: Web Application Security Page: 147 Web Development Page: 148 Information Gathering Page: 151 DNS Page: 153 Defense in Depth Page: 155 Burp Suite Page: 156 CHAPTER 12: Patch and Configuration Management Page: 165 Patch Management Page: 166 Configuration Management Page: 173 Clonezilla Live Page: 179 CHAPTER 13: Securing OSI Layer 8 Page: 187 Human Nature Page: 188 Human Attacks Page: 192 Education Page: 193 The Social Engineer Toolkit Page: 195 CHAPTER 14: Kali Linux Page: 205 Virtualization Page: 206 Optimizing Kali Linux Page: 219 Using Kali Linux Tools Page: 221 CHAPTER 15: CISv7 Controls and Best Practices Page: 235 CIS Basic Controls—The Top Six Page: 236 In Conclusion Page: 248 Index Page: 249 End User License Agreement Page: 263
Description:A practical handbook to cybersecurity for both tech and non-tech professionals
As reports of major data breaches fill the headlines, it has become impossible for any business, large or small, to ignore the importance of cybersecurity. Most books on the subject, however, are either too specialized for the non-technical professional or too general for positions in the IT trenches. Thanks to author Nadean Tanner’s wide array of experience from teaching at a University to working for the Department of Defense, the Cybersecurity Blue Team Toolkit strikes the perfect balance of substantive and accessible, making it equally useful to those in IT or management positions across a variety of industries. This handy guide takes a simple and strategic look at best practices and tools available to both cybersecurity management and hands-on professionals, whether they be new to the field or looking to expand their expertise.
Tanner gives comprehensive coverage to such crucial topics as security assessment and configuration, strategies for protection and defense, offensive measures, and remediation while aligning the concept with the right tool using the CIS Controls version 7 as a guide. Readers will learn why and how to use fundamental open source and free tools such as ping, tracert, PuTTY, pathping, sysinternals, NMAP, OpenVAS, Nexpose Community, OSSEC, Hamachi, InSSIDer, Nexpose Community, Wireshark, Solarwinds Kiwi Syslog Server, Metasploit, Burp, Clonezilla and many more.
Up-to-date and practical cybersecurity instruction, applicable to both management and technical positions
• Straightforward explanations of the theory behind cybersecurity best practices
• Designed to be an easily navigated tool for daily use
• Includes training appendix on Linux, how to build a virtual lab and glossary of key terms
The Cybersecurity Blue Team Toolkit is an excellent resource for anyone working in digital policy as well as IT security professionals, technical analysts, program managers, and Chief Information and Technology Officers. This is one handbook that won’t gather dust on the shelf, but remain a valuable reference at any career level, from student to executive.