Monitoring and Incident Response #

Incident Response #

The Incident Response Process #

Training #

Threat Hunting #

Understanding Attacks and Incidents #

Incident Response Data and Tools #

Monitoring Computing Resources #

Security Information and Event Management Systems #

Alerts and Alarms #

Log Aggregation, Correlation, and Analysis Rules #

Benchmarks and Logging Reporting and Archiving #

Mitigation and Recovery #

Secure Orchestration, Automation, and Response (SOAR) #

Containment, Mitigation, and Recovery Techniques #

Root Cause Analysis #