Learn Blue Teaming and Threat Management

This book is a step-by-step guide to joining the front lines of defense. You will learn how to run a modern Security Operations Center (SOC) and how to handle incidents by starting with the basics of networking, logging, and security frameworks (NIST, MITRE ATT&CK). Some of the main things to focus on are advanced log analysis using tools like SIEM/SOAR/EDR, hypothesis-driven threat hunting to find hidden enemies, and dealing with serious threats like ransomware and APTs.