Learn Blue Teaming and Threat Management: Proactive defense, threat hunting, and incident response strategies (English Edition)

This book is a step—by—step guide to joining the front lines of defense. You will learn how to run a modern Security Operations Center (SOC) and how to handle incidents by starting with the basics of networking, logging, and security frameworks (NIST, MITRE ATT&CK). Some of the main things to focus on are advanced log analysis using tools like SIEM/SOAR/EDR, hypothesis—driven threat hunting to find hidden enemies, and dealing with serious threats like ransomware and APTs.